A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's...
CVE-2026-14615
A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative service
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can...
CVE-2026-14612
Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memor
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-46464
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...
CVE-2026-49813
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow
### Summary `jxl-oxide` exposes a public safe API that can construct an undersized `FrameBuffer` due to unchecked `usize
jxl-oxide: integer subtraction overflow panic in cluster_from_table via crafted JXL input (DoS)
### Summary Logic bug in `decode_simple_table_slow` may cause integer arithmetic overflow when decoding Modular image wi
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
CVE-2026-50267
### Summary When MySQL or PostgreSQL service bindings from `VCAP_SERVICES` include TLS client credentials, the Connecto
Steeltoe's static JWKS cache shared across schemes and never invalidated
CVE-2026-50202
### Summary The JWT signing key cache in `TokenKeyResolver` uses `kid` as the sole cache key without namespacing by aut
Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission
CVE-2026-50201
### Summary All Steeltoe actuator endpoints default to `EndpointPermissions.Restricted`, which is mapped to Cloud Found
@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation
## Summary The `HTMLInputElement.checkValidity()` method constructed a `RegExp` directly from the user-controlled `patt
@nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration
### Summary `UForm` and `UAuthForm` render a server-side `` element with no `method` and no `action` attribute, relying
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14408
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensit
Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote...
CVE-2026-14421
Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote attacker to obtain potent
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14418
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data v
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46...
CVE-2026-14414
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who
Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14388
Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sens
Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14386
Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sens
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14399
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensit
Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote...
CVE-2026-14391
Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromis
Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who...
CVE-2026-14406
Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a m