210320 matches found
CVE-2026-50218
The Akamai GPA (Guardicore Platform Agent) client on all platforms before version 7.4 is vulnerable to an issue where it improperly validates JWT tokens used for seeding. An attacker can exploit this by tricking a user into interacting with a malicious link to provide a spoofed JWT token . This a...
CVE-2026-101985: Improper Validation of Specified Quantity in Input
A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated IS-IS peer to cause a denial of service...
CVE-2026-102033: Improper Validation of Specified Quantity in Input
An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP MC-LAG message...
CVE-2026-91881: Improper Certificate Validation
Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...
PT-2026-113778
Name of the Vulnerable Software and Affected Versions NGINX JavaScript njs affected versions not specified Description The njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. During the canonicalization process in both the built-in njs and QuickJS...
PT-2026-113874
An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP MC-LAG message...
CVE-2026-110455: Improper Input Validation
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device...
CVE-2026-102016: Improper Validation of Specified Quantity in Input
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause a denial of service via a BGP MVPN signaling update...
CVE-2026-73790: Improper Input Validation
A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown...
CVE-2026-110842: Improperly Controlled Modification of Object Prototype Attributes
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member...
PT-2026-114156
Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.41.4 n8n versions 2.42.x prior to 2.42.1 Description A prototype pollution issue exists in the MCP workflow-validation tool. The interpreter evaluates caller-supplied code in the main process, reads inherited properties...
Google BoringSSL Name Constraints bypass in SAN validation logic
Overview Five Name Constraints findings in BoringSSL VU410595.8–.12 describe cases where certificate names may not be constrained as intended. Records .8, .9, .10 and .12 concern the legacy crypto/x509 path; .11 concerns the newer pki path. Two have been fixed, one is accepted, one is disputed, a...
Linux Distros Unpatched Vulnerability : CVE-2026-110870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fails to strip RFC 5322 comments inside...
Safebrowsing Component Google Chrome Microsoft Edge Data Compromise
The Safebrowsing component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially...
Safebrowsing Component Google Chrome Microsoft Edge Data Compromise
The Safebrowsing component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially...
Google Chrome Microsoft Edge DoS
The Printing component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted HTML page...
DeviceBoundSessionCredentials Google Chrome Microsoft Edge Access Information
The vulnerability in the DeviceBoundSessionCredentials component of Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...
Google Chrome Microsoft Edge FindInPage Access Disclosure
The vulnerability in the FindInPage component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially craft...
Google Chrome Navigation Protected Information
The vulnerability in the Navigation component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML...
Google Chrome ServiceWorker Data Compromise
The vulnerability in the ServiceWorker interface of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...