GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: superset, kubeflow-volumes-web-app, datadog-agent, kubeflow-jupyter-web-app...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, datadog-agent, kubeflow-jupyter-web-app...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: superset, kubeflow-volumes-web-app, datadog-agent, kubeflow-jupyter-web-app...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-volumes-web-app, datadog-agent, kubeflow-jupyter-web-app...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, datadog-agent, kubeflow-jupyter-web-app...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: openstack-placement-2026.1-fips, kubeflow-volumes-web-app, openstack-glance-2026.1-fips, datadog-agent-fips, spamcheck, kubeflow-jupyter-web-app, openstack-glance-2025.1, openstack-glance-2025.1-fips, openstack-horizon-2025.1, datadog-agent, nvidia-nsight-compute-13....

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, datadog-agent-fips, superset, kubeflow-jupyter-web-app, azureml-inference-server-http-fips, datadog-agent, spamcheck...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, datadog-agent-fips, superset, kubeflow-jupyter-web-app, azureml-inference-server-http-fips, datadog-agent, spamcheck...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: openstack-placement-2026.1-fips, kubeflow-volumes-web-app, openstack-glance-2026.1-fips, datadog-agent-fips, spamcheck, kubeflow-jupyter-web-app, openstack-glance-2025.1, openstack-glance-2025.1-fips, openstack-horizon-2025.1, datadog-agent, nvidia-nsight-compute-13....

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, datadog-agent-fips, superset, kubeflow-jupyter-web-app, azureml-inference-server-http-fips, datadog-agent, spamcheck...

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

CVE-2026-9602

Mattermost Desktop App vulnerable versions:

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-42486

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-15115

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-56634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.115 Description Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass the same origin policy via a crafted HTML page. The same origin policy is a...

CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to acces...