2026

Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform U

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinc

Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinc

Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in spe

Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who c

Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cros

Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform U

Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially

Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit

Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corr

A stored cross-site scripting (XSS) vulnerability in the recipe asset upload and media serving component in Mealie 3.3.1

A stored HTML injection vulnerability in the Recipe Notes rendering component in Mealie 3.3.1 allows remote authenticate

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write acces

A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage() function of the prom

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary v

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom oper

A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® softwa

An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to

An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf

Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete

An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and

An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disabl

nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers t

An issue was discovered in Pacom Unison Client 5.13.1. Authenticated users can inject malicious scripts in the Report Te

A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.

Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs.

An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.

A lack of session validation in the web API component of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remot

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerabl

MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The app

MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the d

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after

A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This

Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.add

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged use

The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and exp

METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not requi

METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not requi

Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation,

A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially result

Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially result

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation pote

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry

Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentia

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to

The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially