How CVE-2026-68501 Works This vulnerability resides in the Sylius Mollie Plugin, which integrates Mollie payment processing into Sylius e-commerce applications.
CVE-2026-54737 is a critical prototype pollution vulnerability identified in the `@phun-ky/defaults-deep` npm library prior to version 2.0.5. This library provides
CVE-2026-60979 is a high-severity vulnerability affecting the Oracle Scripting product within Oracle E-Business Suite, specifically the Internal Operations component. The
Thumbor is an open-source photo thumbnail service. Prior to version 7.8.0, the `file_loader` component contains a path traversal vulnerability that
CVE-2026-60396 Oracle GoldenGate is an enterprise-grade, real-time data replication and integration middleware widely deployed in mission-critical environments for capturing, routing,
CVE-2026-60400 is a critical privilege escalation vulnerability residing in the Admin Server Executable component of Oracle GoldenGate. This component serves
CVE-2026-60973 is a local privilege escalation vulnerability residing in the Internal Operations component of the Oracle E-Business Tax module within
Savon is a widely used Ruby SOAP client that simplifies communication with SOAP web services. One of its key features
How CVE-2026-46851 Works CVE-2026-46851 is a critical vulnerability affecting the Security component of Oracle PeopleSoft Enterprise CS Campus Community version
How CVE-2026-46979 Works CVE-2026-46979 is an improper access control vulnerability (CWE-284) affecting the Integration and Interfaces component of Oracle PeopleSoft
Intro CVE-2026-58263 is a stored Cross-Site Scripting (XSS) vulnerability in the Jodit WYSIWYG editor. The core issue lies in a
How CVE-2026-53501 Works Thumbor is an open-source photo thumbnail service that uses HMAC-SHA1 to sign URLs, preventing unauthorized loading of
CVE-2026-60985 is a vulnerability residing in the Internal Operations component of the Oracle Project Portfolio Analysis product, which is part
How CVE-2026-54756 Works Jodit Editor is a popular WYSIWYG editor distributed via the npm package jodit. In versions prior to
CVE-2026-60972 is a vulnerability in the Internal Operations component of the Oracle E-Business Tax product within Oracle E-Business Suite. The
Thumbor is an open-source photo thumbnail service that provides on-demand image cropping, resizing, and filtering. To prevent Server-Side Request Forgery
Thumbor versions prior to 7.8.0 contain a vulnerability in the `filters:proportion()` filter. The filter parses the “ parameter as a
CVE-2026-60986 is a critical improper authorization vulnerability affecting the Oracle Project Portfolio Analysis product within the Oracle E-Business Suite. The
How CVE Works The vulnerability resides in Zaino’s `NonFinalizedState::handle_reorg` function, located in `packages/zaino-state/src/chain_index/non_finalised_state.rs` at lines 443–489. This async function is
CVE-2026-55100 is a critical vulnerability discovered in the `hashi-vault-js` library, a Node.js module designed to interact with HashiCorp Vault. The
CVE-2026-53466 is an integer overflow vulnerability discovered in the XCF decoder component of ImageMagick, a widely-used open-source image processing library.
CVE-2026-61103 is a vulnerability in the Security component of Oracle PeopleSoft Enterprise CS Campus Community, affecting version 9.2.38. The flaw
CVE-2026-60978 is an improper access control vulnerability (CWE-284) residing in the Internal Operations component of the Oracle Scripting product within
How CVE-2026-60395 Works CVE-2026-60395 is an information disclosure vulnerability affecting the Oracle GoldenGate data replication and integration platform. The flaw
CVE-2026-61234 describes a critical access control bypass vulnerability residing in the eProcurement component of Oracle PeopleSoft Enterprise FIN Common Objects
How CVE-2026-17765 Works CVE-2026-17765 is a medium‑severity vulnerability in Google Chrome’s WebProtect component that allows a remote attacker, who has
CVE-2026-61232 is an improper access control vulnerability (CWE-284) affecting the Oracle PeopleSoft Enterprise FIN Common Objects Brazil product, specifically version
CVE-2026-17763 is a medium-severity vulnerability in Google Chrome that stems from an inappropriate implementation within the browser’s GPU subsystem. The
CVE-2026-17689 is a high-severity vulnerability in Google Chrome’s ANGLE (Almost Native Graphics Layer Engine) component, which handles graphics operations and
CVE-2026-17730 is a medium‑severity side‑channel information leakage vulnerability in Google Chrome’s Autofill component, affecting all versions prior to 151.0.7922.72. The
CVE-2026-60617 is an improper authorization vulnerability affecting the Oracle PeopleSoft Enterprise CS Campus Community product, specifically version 9.2.38. The flaw
CVE-2026-17740 describes an uninitialized use vulnerability within ANGLE, the graphics library component integral to Google Chrome’s rendering pipeline. ANGLE serves
CVE-2026-17696 describes a high‑severity side‑channel information leakage vulnerability affecting Google Chrome’s media processing pipeline. The flaw exists in all Chrome
CVE-2026-46968 is a privilege management vulnerability residing in the JSSE (Java Secure Socket Extension) component of Oracle Java SE. The
CVE-2026-61074 is a high‑severity vulnerability affecting the eProcurement component of Oracle PeopleSoft Enterprise FIN Common Objects Brazil, version 9.1. The
CVE-2026-61233 is a critical vulnerability affecting the Integration component of Oracle PeopleSoft Enterprise FIN Common Objects Brazil, version 9.1. The
CVE-2026-61070 is a problematic vulnerability identified in the Oracle PeopleSoft Enterprise FIN Common Objects Argentina product, specifically within the Cash
How CVE-2026-61073 Works CVE-2026-61073 is an improper access control vulnerability affecting the Purchasing component of Oracle PeopleSoft Enterprise FIN Common
How CVE-2026-17760 Works CVE-2026-17760 is a side-channel information disclosure vulnerability residing in Google Chrome’s NoStatePrefetch component, affecting all versions prior
CVE-2026-17757 is a medium‑severity vulnerability affecting Google Chrome’s Skia graphics library. The flaw stems from improper initialization of memory variables
CVE-2026-47014 is a vulnerability in the Security component of Oracle Product Workbench, which is part of Oracle E-Business Suite. The
CVE-2026-47019 is an improper authorization vulnerability affecting the Oracle Product Hub component within Oracle E-Business Suite. The flaw resides specifically
CVE-2026-60339 is a low‑severity information disclosure vulnerability affecting the Oracle Project Manufacturing module within Oracle E‑Business Suite. The flaw resides
How CVE-2026-62483 Works CVE-2026-62483 resides in the Internal Operations component of Oracle Project Contracts, which is part of the Oracle
CVE-2026-60321 is a vulnerability residing in the PJM Command Center component of the Oracle Project Manufacturing module, which is part
CVE-2026-47021 is a medium-severity vulnerability affecting the 2D component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM
CVE-2026-60939 is a vulnerability in the Oracle Project Contracts module of Oracle E-Business Suite, specifically within the Internal Operations component.
– How CVE-2026-60337 Works CVE-2026-60337 is a security vulnerability affecting the Oracle Project Manufacturing product, which is a module within
CVE-2026-60336 is a vulnerability affecting the Oracle Project Manufacturing product within Oracle E-Business Suite, specifically in the PJM Command Center
CVE-2026-60848 is a vulnerability in the Oracle Project Contracts product, specifically within the Internal Operations component. This flaw affects Oracle
How CVE-2026-60338 Works CVE-2026-60338 is a vulnerability discovered in the Oracle Project Manufacturing product, which is a component of the
How CVE-2025-4318 Works The AWS Amplify Studio `amplify-codegen-ui` package is a JavaScript library that automatically generates front-end code from UI
How CVE-2026-66066 Works CVE-2026-66066 is a critical vulnerability in Ruby on Rails’ Active Storage component when configured to use the
How CVE-2026-60579 Works CVE-2026-60579 is a high-severity vulnerability affecting the Oracle Enterprise Command Center Framework, which is part of the
How the CVE Works netfoil is a minimal, hardened DNS proxy written in Go, designed to filter and block malicious
A critical vulnerability has been identified in HKUDS LightRAG, tracked as CVE-2026-61736. The flaw resides in the server’s default Cross-Origin
CVE-2026-8505 is a critical authentication bypass vulnerability affecting IBM Langflow OSS versions 1.0.0 through 1.10.0. The flaw resides in the
How CVE-2026-59924 Works Mistune is a Python Markdown parser with renderers and plugins. Prior to version 3.3.0, a path traversal
The `parse()` function in `shell-quote` prior to version 1.8.5 uses an inefficient algorithm that causes a denial-of-service vulnerability. The root
How CVE-2026-59922 Works Mistune is a Python Markdown parser that supports optional formatting plugins for strikethrough (~~), mark (==), and
How CVE-2026-59923 Works Mistune is a widely used Python Markdown parser with renderers and plugins. The vulnerability exists in the
How CVE-2026-59868 Works js-yaml is a JavaScript YAML parser and dumper widely used in Node.js applications for configuration files, data
How CVE-2026-59929 Works Mistune is a popular Python Markdown parser that renders Markdown content into HTML. To prevent cross-site scripting
How CVE-2026-58530 Works CVE-2026-58530 is a critical heap-based buffer overflow vulnerability identified in the Windows Resilient File System (ReFS). ReFS
A Server-Side Request Forgery (SSRF) protection bypass has been identified in Directus versions prior to 12.0.0. The vulnerability resides in
How CVE-2026-61740 Works CVE-2026-61740 is a critical improper authentication vulnerability in HKUDS LightRAG versions prior to 1.5.4. The flaw manifests
CVE-2026-7872 is a path traversal vulnerability (CWE-22) identified in IBM Langflow OSS versions 1.0.0 through 1.10.0. The flaw resides in
CVE-2026-57108 is a type confusion vulnerability in Microsoft .NET Core that allows an unauthenticated remote attacker to trigger a denial-of-service
CVE-2026-58608 is a critical remote code execution vulnerability residing in the Windows Print Spooler components. The flaw is rooted in
CVE-2026-58610 is a heap-based buffer overflow vulnerability affecting Microsoft Windows Media Foundation (WMF), the core multimedia framework responsible for decoding,
How CVE-2026-58601 Works CVE-2026-58601 is a heap‑based buffer overflow vulnerability residing in the Virtual Hard Disk (VHD) Miniport Driver, a
How CVE-2026-50404 Works CVE-2026-50404 is a race condition vulnerability residing in the Windows Media subsystem that allows a local, authenticated
How CVE-2026-42264 Works Axios is a promise-based HTTP client for both Node.js and the browser. Between versions 1.0.0 and 1.15.1,
How GHSA-pmv8-rq9r-6j72 Works Axios versions starting from 0.28.0 introduce a public helper `formDataToJSON` (exposed as axios.formToJSON()) and use it internally
CVE-2026-50340 is a critical use‑after‑free (UAF) vulnerability in the Windows Runtime component that allows an authenticated, low‑privileged attacker to elevate
The vulnerability exists in the `shouldBypassProxy()` function within Axios, which determines whether a request should bypass a configured proxy based
How CVE-2026-57096 Works CVE-2026-57096 is a heap-based buffer overflow vulnerability residing in the Windows Routing and Remote Access Service (RRAS).
CVE-2026-50341 is a medium-severity information disclosure vulnerability residing in the Windows New Technology File System (NTFS) driver. Discovered and disclosed
CVE-2026-55144 is a vulnerability in Microsoft’s Cryptography API: Next Generation (CNG), the modern cryptographic subsystem introduced in Windows Vista and
How CVE-2026-54996 Works CVE-2026-54996 is a race condition vulnerability residing in the Windows USB Print Driver component (usbprint.sys). The flaw
How CVE-2026-58609 Works CVE-2026-58609 is a high‑severity vulnerability in the Microsoft Windows Graphics Component that arises from an out‑of‑bounds read
CVE-2026-57979 is an information disclosure vulnerability residing in the Windows Remote Desktop Protocol (RDP) stack. The flaw is classified as
CVE-2026-50348 is a race condition vulnerability in the Windows Runtime (WinRT) component that allows an unauthorized attacker to elevate privileges
How CVE-2026-50353 Works CVE-2026-50353 is a critical use-after-free (UAF) vulnerability residing within the Windows DirectX graphics subsystem, specifically in the
How CVE-2026-50331 Works CVE-2026-50331 is a critical use-after-free (UAF) vulnerability identified in the Windows Application Model component, which is responsible
CVE-2026-50357 is a critical elevation of privilege vulnerability residing in the Windows Resilient File System (ReFS) kernel component. The flaw
How CVE-2026-50334 Works CVE-2026-50334 is an information disclosure vulnerability residing in the Windows Notification subsystem — specifically the Windows Push
How CVE-2026-54995 Works The vulnerability resides in the Reliable Multicast Transport Driver (rmcast.sys), a kernel-mode component responsible for handling reliable
CVE-2026-54997 is a medium-severity information disclosure vulnerability in the Windows Server Message Block (SMB) protocol implementation. The flaw stems from
How CVE-2026-58526 Works CVE-2026-58526 is a use-after-free (UAF) vulnerability in the Windows Storage component that allows a locally authenticated attacker
CVE-2026-49172 is a heap-based buffer overflow vulnerability in the Microsoft Windows FTP Service that allows an unauthenticated remote attacker to
How CVE-2026-50413 Works CVE-2026-50413 is a critical use‑after‑free (UAF) vulnerability residing in the Windows Runtime subsystem – the execution environment
CVE-2026-50406 is a use-after-free vulnerability in the Microsoft Windows Backup Engine that allows an authorized attacker to elevate privileges locally.
CVE-2026-50418 is a security feature bypass vulnerability residing in the Windows operating system’s core access control mechanisms. The flaw stems
How CVE-2026-54989 Works CVE-2026-54989 is a use-after-free (UAF) vulnerability residing in the Quality Windows Audio/Video Experience (QWAVE) service, a core
CVE-2026-50412 is a stack-based buffer overflow vulnerability discovered in the Windows NTFS (New Technology File System) component. The flaw resides
CVE-2026-50409 is an information disclosure vulnerability affecting the Windows Overlay Filter component—a kernel‑mode driver used by Unified Write Filter (UWF)
How CVE-2026-34150 Works CVE-2026-34150 is a critical heap buffer overflow vulnerability discovered in Wazuh, an open-source security monitoring and SIEM
How CVE‑2026‑50414 Works CVE‑2026‑50414 is a race condition vulnerability in the Windows Media subsystem that allows an authenticated attacker to
How CVE-2026-54982 Works CVE-2026-54982 is a critical remote code execution vulnerability residing in the Windows Reliable Multicast Transport Driver (rmcast.sys).
