198340 matches found
PT-2026-81451
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require use...
Linux Distros Unpatched Vulnerability : CVE-2026-76816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client...
PT-2026-81284
Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...
Linux Distros Unpatched Vulnerability : CVE-2026-75509
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3,...
PT-2026-81126
Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...
PT-2026-81326
Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The Jobs API contains a flaw where the validate webhook url function fails open when a socket.gaierror occurs during DNS resolution. This allows the webhook url parameter to bypass validation if t...
PT-2026-81187
The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 2.1.8 via the uploadMedia function. This is due to insufficient file type validation in the upload handler, which...
PT-2026-81819
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome to...
PT-2026-81583
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the StorageAccessAPI allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...
PT-2026-81629
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...
PT-2026-81664
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper state validation in the Parser allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...
PT-2026-81689
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the input component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and...
PT-2026-81763
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DevTools allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page. Site isolation i...
PT-2026-81803
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ReadingList component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by usi...
PT-2026-81811
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or...
PT-2026-81318
Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.58 Description A Server-Side Request Forgery SSRF issue exists in the multi-agent teams system. The function host is blocked in spider tools.py fails to perform DNS resolution on hostnames before they are...
PT-2026-81613
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ServiceWorker allows a remote attacker to bypass system access restrictions by using a crafted HTML page. A ServiceWorker is a script that the browser...
PT-2026-81774
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Preload component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...
PT-2026-81606
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Improper input validation in the GPU component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox. Th...
PT-2026-81458
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...