In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no ad...

CVE-2026-55269

In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. Th

历史摘要 · 未重新核验 · NVD

In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local ...

CVE-2026-28640

In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass du

历史摘要 · 未重新核验 · NVD

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the privileged control plane namespace...

CVE-2026-101919

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) sec

历史摘要 · 未重新核验 · NVD

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required t...

CVE-2026-104811

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected insta

历史摘要 · 未重新核验 · NVD

OpenAM before 16.1.3 contains an email content injection vulnerability that allows...

CVE-2026-105117

OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control

历史摘要 · 未重新核验 · GitHub Advisory

OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control notification email wording via the forgotPassword and reg...

CVE-2026-105117

OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control

历史摘要 · 未重新核验 · NVD

OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions

CVE-2026-105117

OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control

历史摘要 · 未重新核验 · OSV.dev

Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacke...

CVE-2026-63569

Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Cas

历史摘要 · 未重新核验 · NVD

MTI/A0 DHAgreement does not validate the peer's ephemeral value

CVE-2026-63569

Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Cas

历史摘要 · 未重新核验 · OSV.dev

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application...

CVE-2025-31980

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker t

历史摘要 · 未重新核验 · NVD

Nodemailer: Quoted local-part can produce malformed envelope recipient through RFC 5322 comment parsing

## Summary Nodemailer's address parser can produce an unexpected recipient address when an RFC 5322 comment follows the

历史摘要 · 未重新核验 · GitHub Advisory

Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA, CHANNEL_EXTENDED_DATA, CHANNEL_...

CVE-2026-102823

Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.

历史摘要 · 未重新核验 · NVD

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

CVE-2026-102823

Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.

历史摘要 · 未重新核验 · OSV.dev

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to ...

CVE-2026-95382

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary...

CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · NVD

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severit...

CVE-2026-95364

Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI ele

历史摘要 · 未重新核验 · NVD

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary ...

CVE-2026-95341

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromis

历史摘要 · 未重新核验 · NVD

Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary c...

CVE-2026-95276

Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · NVD

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxe...

CVE-2026-102677

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 unti

历史摘要 · 未重新核验 · NVD

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

CVE-2026-102677

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 unti

历史摘要 · 未重新核验 · OSV.dev