Total
13237 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-67969 | 2026-08-31 | N/A | 7.5 HIGH | ||
| An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl entry. | |||||
| CVE-2026-67974 | 2026-08-31 | N/A | 7.5 HIGH | ||
| A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via sending a crafted packet. | |||||
| CVE-2026-18801 | 2026-08-31 | N/A | N/A | ||
| OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer can store a malicious value in the usageAttribution.key or usageAttribution.subjectKeys fields. When that customer is subsequently used in a meter or event query, OpenMeter inserts the stored value into a ClickHouse WITH map(...) expression using string concatenation. OpenMeter versions from v1.0.0-beta.218 through v1.0.0-beta.231 are affected. | |||||
| CVE-2026-79025 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 4.2 MEDIUM |
| Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-79230 | 2 Apple, Google | 2 Macos, Chrome | 2026-08-31 | N/A | 8.8 HIGH |
| Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-81707 | 2026-08-31 | N/A | 9.8 CRITICAL | ||
| openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows or keyserver responses to manipulate terminal output and display a fraudulent fingerprint, bypassing the out-of-band verification mechanism that protects against key substitution attacks. | |||||
| CVE-2026-59650 | 1 Bouncycastle | 2 Bc-java, Bouncy Castle For Java Lts | 2026-08-31 | N/A | 9.1 CRITICAL |
| In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | |||||
| CVE-2026-79106 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 4.3 MEDIUM |
| Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-79151 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 4.3 MEDIUM |
| Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium) | |||||
| CVE-2026-79259 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 4.3 MEDIUM |
| Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium) | |||||
| CVE-2026-79260 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 6.5 MEDIUM |
| Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-79066 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 3.1 LOW |
| Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-79065 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 4.3 MEDIUM |
| Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-79032 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 6.8 MEDIUM |
| Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-71217 | 2026-08-31 | N/A | 7.5 HIGH | ||
| A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread creation, as well as large buffer allocations, causing resource exhaustion. Consequently, this can result in a Denial of Service (DoS) on the affected iperf3 server. | |||||
| CVE-2026-79272 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 3.1 LOW |
| Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-20913 | 1 Intel | 1 Neural Compressor | 2026-08-31 | N/A | 5.3 MEDIUM |
| Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. | |||||
| CVE-2026-79076 | 1 Google | 1 Chrome | 2026-08-31 | N/A | 6.5 MEDIUM |
| Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium) | |||||
| CVE-2023-47855 | 2 Intel, Netapp | 2 Tdx Module, Hci Compute Node Bios | 2026-08-31 | N/A | 6.0 MEDIUM |
| Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. | |||||
| CVE-2023-45745 | 2 Intel, Netapp | 2 Tdx Module, Hci Compute Node Bios | 2026-08-31 | N/A | 7.9 HIGH |
| Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. | |||||