by Kastro CVE-2023-54400 · Fumasoft Fumeng Cloud
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,502 matching vulnerabilities · Page 35 of 771
Fumasoft
steveukx
CVE-2026-102829 · steveukx git-js
simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
CVE-2026-102827 · steveukx git-js
simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
CVE-2026-102828 · steveukx git-js
simple-git unsafe-operation guard does not block trailer command configuration
Hewlett Packard Enterprise (HPE)
CVE-2026-76724 · Hewlett Packard Enterprise (HPE) Instant ON
Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol
CVE-2026-76721 · Hewlett Packard Enterprise (HPE) Instant ON
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs
CVE-2026-76722 · Hewlett Packard Enterprise (HPE) Instant ON
Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs
CVE-2026-76723 · Hewlett Packard Enterprise (HPE) Instant ON
Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS
CVE-2026-76725 · Hewlett Packard Enterprise (HPE) Instant ON
Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs
balbooa.com
CVE-2026-102425 · balbooa.com Balbooa Forms extension for Joomla
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
CVE-2026-101127 · balbooa.com Balbooa Forms extension for Joomla
Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
electron
Finsys
CVE-2026-95281 · Google Chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outsid…
CVE-2026-95350 · Google Chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outsid…
CVE-2026-102331 · Google Chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary…
CVE-2026-95284 · Google Chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outsid…
CVE-2026-95310 · Google Chrome
Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbo…
CVE-2026-95313 · Google Chrome
Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outs…
CVE-2026-95329 · Google Chrome
Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbit…
CVE-2026-95339 · Google Chrome
Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the s…
CVE-2026-95349 · Google Chrome
Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary…
CVE-2026-95357 · Google Chrome
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitra…
CVE-2026-95356 · Google Chrome
Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potenti…
CVE-2026-102306 · Google Chrome
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outsi…
CVE-2026-95283 · Google Chrome
Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary…
CVE-2026-95318 · Google Chrome
Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside…
CVE-2026-102304 · Google Chrome
Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandb…
CVE-2026-102308 · Google Chrome
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitr…
CVE-2026-102309 · Google Chrome
Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sand…
CVE-2026-102316 · Google Chrome
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitr…
CVE-2026-95277 · Google Chrome
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside t…
CVE-2026-95299 · Google Chrome
Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via…
CVE-2026-95311 · Google Chrome
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to poten…
CVE-2026-95325 · Google Chrome
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside t…
CVE-2026-95331 · Google Chrome
Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outs…
CVE-2026-95347 · Google Chrome
Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside t…
IBM
CVE-2026-84436 · IBM Guardium Data Protection
IBM Guardium Data Protection is affected by multiple vulnerabilities.
Toptech Systems
CVE-2026-71379 · Toptech Systems TMS7
Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties
CVE-2026-70356 · Toptech Systems TMS7
Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type
CVE-2026-63713 · Toptech Systems TMS7
Toptech TMS7 and TopHAT SQL Injection
CVE-2026-72510 · Toptech Systems TMS7
Toptech TMS7 and TopHAT SQL Injection
CVE-2026-68068 · Toptech Systems TMS7
Toptech TMS7 and TopHAT SQL Injection
CVE-2026-68954 · Toptech Systems TMS7
Toptech TMS7 and TopHAT SQL Injection
Red Hat
CVE-2026-102560 · Red Hat Red Hat Enterprise Linux 10
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
Viidure
CVE-2026-96587 · Viidure Dashcam Android Application
Use of Hard-coded Credentials in Viidure Dashcam Android Application
Anjvision
Wikimedia Foundation
CVE-2026-100240 · Wikimedia Foundation Mediawiki - TemplateSandbox Extension
TemplateSandbox does not check read permissions for the page being previewed
Eclipse Foundation
CVE-2026-102761 · Eclipse Foundation NetX Duo
NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while th…
CVE-2026-102710 · Eclipse Foundation eclipse-threadx/threadx