by Kastro CVE-2026-106446 · handlebars-lang handlebars.js
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
4,832 matching vulnerabilities · Page 28 of 97
handlebars-lang
CVE-2026-106445 · handlebars-lang handlebars.js
Handlebars: JavaScript Injection via Own Property Check Bypass
Gitea
CVE-2026-94205 · Gitea Gitea
Gitea fork workflow approval bypass through maintainer-triggered events
CVE-2026-73278 · Gitea Gitea
Gitea WebAuthn bypass during OAuth and OIDC sign-in
CVE-2026-103059 · Gitea Gitea
Gitea built-in SSH server authentication bypass through key case folding
CVE-2026-101023 · Gitea Gitea
Gitea OAuth2 refresh token grant accepts access tokens
CVE-2026-95106 · Gitea Gitea
Gitea review and execution mismatch through duplicate tree entries
Hewlett Packard Enterprise (HPE)
CVE-2026-76742 · Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
Authentication Bypass in the Web Management Interface of AOS-S
CVE-2026-76743 · Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
Authentication Bypass Vulnerability in the Management Interface of AOS-S
CVE-2026-76750 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager
CVE-2026-76744 · Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S
CVE-2026-76752 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access
CVE-2026-76753 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
CVE-2026-79796 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Authentication Bypass Vulnerabilities in ClearPass Policy Manager
CVE-2026-79805 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager
CVE-2026-76754 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager
CVE-2026-76747 · Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S
CVE-2026-79798 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
CVE-2026-79801 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent
CVE-2026-76751 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution
CVE-2026-76745 · Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S
CVE-2026-79794 · Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
CVE-2026-76746 · Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S
Arista Networks
CVE-2026-101155 · Arista Networks CloudVision Portal
Security Advisory 0189
CVE-2026-102159 · Arista Networks CloudVision CUE
Security Advisory 0190
CVE-2026-101158 · Arista Networks CloudVision Portal
Security Advisory 0185
CVE-2026-102162 · Arista Networks Wi-Fi Access Points
Security Advisory 0193
CVE-2026-101157 · Arista Networks CloudVision CUE
Security Advisory 0192
CVE-2026-102167 · Arista Networks Wi-Fi Access Points
Security Advisory 0197
backstage
CVE-2026-106211 · Google Chrome
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially…
CVE-2026-106227 · Google Chrome
Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox vi…
CVE-2026-106375 · Google Chrome
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsid…
CVE-2026-106329 · Google Chrome
Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to…
CVE-2026-106372 · Google Chrome
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code out…
CVE-2026-106234 · Google Chrome
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially…
CVE-2026-106241 · Google Chrome
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engin…
CVE-2026-106281 · Google Chrome
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside th…
CVE-2026-106298 · Google Chrome
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrar…
CVE-2026-106323 · Google Chrome
Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social eng…
CVE-2026-106401 · Google Chrome
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outs…
CVE-2026-106414 · Google Chrome
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social enginee…
CVE-2026-106417 · Google Chrome
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside…
CVE-2026-106195 · Google Chrome
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access…
CVE-2026-106237 · Google Chrome
Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted…
CVE-2026-106294 · Google Chrome