5017 matches found
CGA-6W3G-RW93-FQQX
Bulletin has no description...
CGA-286W-JM68-99XP
Bulletin has no description...
CGA-7Q67-X22V-22VX
Bulletin has no description...
CGA-2XC8-PV5V-6V46
Bulletin has no description...
CVE-2026-21713
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
CGA-4XV9-G36X-JW8X
Bulletin has no description...
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution...
@grackle-ai/cli (>=0.0.2, <=0.70.3) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.3)
@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.3 Source cves: unknown CVE Source advisory: OSV:GHSA-3MJM-X6GW-2X42...
SUSE CVE-2026-21717
A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the...
Google Chrome has an unknown vulnerability (CNVD-2026-29293)
Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a security vulnerability, which stems from improper implementation of the V8 engine. Attackers can exploit this vulnerability to execute arbitrary code within the sandbox...
CGA-7FFR-9JV6-QM73
Bulletin has no description...
CGA-5G9P-PJRH-9GHM
Bulletin has no description...
CVE-2026-3083
GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependin...
CVE-2026-3442
A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may...
SUSE CVE-2026-25704
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use TOCTOU Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before...
CVE-2026-31961
A flaw was found in Quill. An attacker can exploit this unbounded memory allocation vulnerability by providing a specially crafted Mach-O binary to Quill for processing. This malicious binary contains oversized values in its code signing structures, causing Quill to attempt to allocate excessive...
CGA-6GM4-F5FM-HPW6
Bulletin has no description...
CVE-2026-3401 SourceCodester Web-based Pharmacy Product Management System session expiration
A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the...