198525 matches found
CVE-2026-76198: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...
PT-2026-81587
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in ReaderMode allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can...
PT-2026-81174
The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.11 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an...
PT-2026-81327
Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description A Server-Side Request Forgery SSRF issue exists due to a Time-of-Check to Time-of-Use TOCTOU flaw and a fail-open DNS validation mechanism. The JobSubmitRequest.validate webhook url function...
EulerOS Virtualization 2.13.1 : dnsmasq (EulerOS-SA-2026-3170)
According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via...
Linux Distros Unpatched Vulnerability : CVE-2026-75975
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an...
PT-2026-81481
Name of the Vulnerable Software and Affected Versions Coroot affected versions not specified Description An unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation. This allows attackers to register clients that point to hosts...
PT-2026-81598
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DeviceBoundSessionCredentials allows a remote attacker to bypass the web origin policy through crafted network traffic, typically leveraging social...
CVE-2026-65084: Improper Certificate Validation
NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, code execution, and escalation of privileges...
CVE-2026-55637: Origin Validation Error
genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...
CVE-2026-79259: Improper Input Validation
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...
The vulnerability of the __arm_lpae_unmap() function in the drivers/iommu/io-pgtable-arm.c file of the Linux operating system’s IOMMU driver allows a hacker to trigger a service failure.
The vulnerability of the armlpaeunmap function in the drivers/iommu/io-pgtable-arm.c file of the Linux operating system’s IOMMU driver is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the btf_func_proto_check() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system, allows a attacker to cause a service failure.
The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the kaweth_probe() function in the drivers/net/usb/kaweth.c module of the Linux network adapter driver allows a hacker to cause a service failure.
The vulnerability of the kawethprobe function in the drivers/net/usb/kaweth.c module of the Linux USB network adapter driver framework is related to improper validation of consistency checks in input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the `compat_arm_syscall()` function in the `arch/arm64/kernel/sys_compat.c` module allows a hacker to trigger a service failure on the ARM 64-bit kernel-based Linux operating system.
The vulnerability of the compatarmsyscall function in the arch/arm64/kernel/syscompat.c module of the Linux operating system’s 64-bit ARM architecture kernel is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mcba_usb_probe() function in the drivers/net/can/usb/mcba_usb.c file of the Linux kernel’s network device support driver allows a hacker to cause a service failure.
The vulnerability of the mcbausbprobe function in the drivers/net/can/usb/mcbausb.c file of the Linux network device driver module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
Google Chrome < 152.0.7977.64 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 152.0.7977.64. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0256176589 advisory. - Use after free in Aura in Google Chrome prior to 152.0.7977.65...
EulerOS Virtualization 2.13.0 : gnutls (EulerOS-SA-2026-3213)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...
PT-2026-81320
Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The MCP HTTP Stream transport in PraisonAI uses an unsafe prefix match when validating the Origin header via the validate origin method. The validation logic accepts any origin that starts with an...
CVE-2026-65637: Improper Input Validation
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...