Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169...
CVE-2026-76039
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker
2026-08-19 归档
今日共收录 2403 条安全情报，包含 1575 个 CVE，408 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73930
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73924
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73922
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73921
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73920
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73917
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73916
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73912
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73905
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it
CVE-2026-71417
## Summary Repo under test: https://github.com/Netflix/lemur `PUT /api/1/certificates//revoke` authorizes the caller a
Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority
CVE-2026-71317
## Summary Repo under test: https://github.com/Netflix/lemur When `ADMIN_ONLY_AUTHORITY_CREATION=False` (an explicitly
Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates
CVE-2026-71308
## Summary Repo under test: https://github.com/Netflix/lemur The certificate create and upload endpoints accept a `rep
Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints
CVE-2026-62988
## Summary Several Froxlor API command classes return sensitive authentication material in JSON API responses. The affe
Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover
CVE-2026-54347
### Summary A stored Cross-Site Scripting (XSS) vulnerability in Froxlor's DNS editor allows an authenticated user with
jmespath.php has CompilerRuntime code injection via unescaped function names
CVE-2026-54133
## Impact `mtdowling/jmespath.php` can generate and execute attacker-controlled PHP code when `JmesPath\CompilerRuntime
surfio has an out-of-bounds read
CVE-2026-55211
### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer o
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read
CVE-2026-55209
### Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assume
kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)
CVE-2026-55107
### Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully
Firefox browsers
Firefox browsers