CVE ID :CVE-2026-95357 Published : Sept. 29, 2026, 6:17 p.m. | 49 minutes ago Description :Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE ID :CVE-2026-95350 Published : Sept. 29, 2026, 6:17 p.m. | 49 minutes ago Description :Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a…
CVE ID :CVE-2026-95339 Published : Sept. 29, 2026, 6:17 p.m. | 49 minutes ago Description :Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…
CVE ID :CVE-2026-84842 Published : Sept. 29, 2026, 6:17 p.m. | 50 minutes ago Description :IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this…
CVE ID :CVE-2026-84436 Published : Sept. 29, 2026, 6:17 p.m. | 50 minutes ago Description :IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands…
CVE ID :CVE-2026-93355 Published : Sept. 28, 2026, 7:26 p.m. | 23 minutes ago Description :LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by…
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics…
CVE ID :CVE-2026-101110 Published : Sept. 28, 2026, 7:16 p.m. | 32 minutes ago Description :Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 – site’s books() function reads the field and direction request parameters and…
CVE ID :CVE-2026-101108 Published : Sept. 28, 2026, 7:16 p.m. | 32 minutes ago Description :Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 – site reads the order_field and order_direction sort parameters at three separate…
CVE ID :CVE-2026-100752 Published : Sept. 28, 2026, 7:16 p.m. | 32 minutes ago Description :Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 – site builds the ORDER BY clause of three separate frontend…