dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-93888

The apnotify utility within IBM Sterling Connect:Direct for UNIX is vulnerable to a code injection flaw caused by insufficient validation of user input (CWE-122). This vulnerability, characterized as a stack-based buffer overflow , impacts versions 6.4.0.0 through 6.4.0.6.iFix021 and 6.3.0.0 thro...

CVE-2026-93888 IBM Sterling Connect:Direct for Unix Buffer Overflow

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input...

CVE-2024-50473

CVE-2024-50473 Ajar in5 Embed = 3.1.3 - Unauthenticated Arbitrary File Upload Description: The Ajar in5 Embed plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.1.3. This makes it possible for unauthenticated...

CVE-2026-87865

When libcurl uses libssh2 with a hashed knownhosts file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing key to the CURLOPTSSHKEYFUNCTION callback...

CVE-2026-113294

Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113294

Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113294

Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113294

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a flaw involving improper input validation within the Loader component. A remote attacker could exploit this by hosting a crafted HTML page , potentially leading to the execution of arbitrary code within the sandbox. While the Chromi...

CVE-2026-113046

Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113046

Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113046

Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113046

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a vulnerability in the Passwords component. The root cause is improper input validation , which could allow a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . While the Chromium secu...

CVE-2026-113063

Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113292

Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113306

Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113306

Google Chrome versions prior to 156.0.8078.47 are vulnerable to improper input validation within the Network component. A remote attacker can exploit this flaw by leveraging a crafted HTML page to potentially execute arbitrary code inside the sandbox. While the Chromium security severity is rated...

CVE-2026-113023

Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113023

Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...