Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

CVE-2026-16970 DFIR-IRIS Insufficient Logout Implementation

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...

CVE-2026-18362 DFIR-IRIS Missing Brute Force Protection in User Authentication

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

CVE-2026-18362

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

CVE-2026-16971 DFIR-IRIS Missing Brute Force Protection in OTP Validation

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...

CVE-2026-16971

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...

CVE-2026-18361

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the datastore upload function...

CVE-2026-18360

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the custom attributes function...

DEBIAN-CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50621

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14122

An insufficient validation of untrusted input flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513824891...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, mitmproxy, datadog-agent, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-pipelines-visualization-server...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, mitmproxy, datadog-agent, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-pipelines-visualization-server...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: httpie, kubeflow-jupyter-web-app, superset, datadog-agent, kubeflow-katib, kubeflow-volumes-web-app...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, mitmproxy, datadog-agent, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-pipelines-visualization-server...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: httpie, kubeflow-jupyter-web-app, superset, datadog-agent, kubeflow-katib, kubeflow-volumes-web-app...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, superset, datadog-agent, openstack-horizon-2026.1, openstack-glance-2026.1-fips, openstack-glance-2025.1, openstack-keystone-2025.1-fips, httpie, openstack-tempest-2026.1, datadog-agent-fips, kubeflow-jupyter-web-app,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: gitlab-cng, datadog-agent, metaflow-service-fips, k8s-sidecar, openstack-keystone-2025.1-fips, metaflow-service, mitmproxy, awx, kubeflow, azureml-inference-server-http-fips, authentik, litellm, datadog-agent-fips, kubeflow-jupyter-web-app, superset-fips,...