CVE Security

Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and ...

Mobile Web


                                    CVE-2026-48249

Lire l'article

high 7.1

28/05/2026

Vulnérabilité high détectée - CVE-2026-48238

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/mobile_main.php where the id GET parameter is concatenated into the WHE...

Mobile Web


                                    CVE-2026-48238

Lire l'article

medium 5.7

28/05/2026

Vulnérabilité medium détectée - CVE-2026-1815

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking. ...

Mobile


                                    CVE-2026-1815

Lire l'article

medium 6.3

28/05/2026

Vulnérabilité medium détectée - CVE-2026-1816

Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application a...

Mobile


                                    CVE-2026-1816

Lire l'article

medium 6.5

28/05/2026

Vulnérabilité medium détectée - CVE-2026-45254

In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" ins...

iOS Mobile


                                    CVE-2026-45254

Lire l'article

unknown

28/05/2026

Vulnérabilité unknown détectée - CVE-2026-43496

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeke...

iOS Linux Mobile


                                    CVE-2026-43496

Lire l'article

medium 6.1

27/05/2026

Vulnérabilité medium détectée - CVE-2026-22880

Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin wh...

Mobile Windows


                                    CVE-2026-22880

Lire l'article

unknown

27/05/2026

Vulnérabilité unknown détectée - CVE-2026-47782

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation n...

Android Mobile


                                    CVE-2026-47782

Lire l'article

high 7.5

27/05/2026

Vulnérabilité high détectée - CVE-2026-9123

Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute arbitrary ...

Android Applications Linux


                                    CVE-2026-9123

Lire l'article

medium 6.5

26/05/2026

Vulnérabilité medium détectée - CVE-2026-8706

Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs a...

Applications iOS Mobile


                                    CVE-2026-8706

Lire l'article

high 7.5

26/05/2026

Vulnérabilité high détectée - CVE-2026-8945

Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151.

Android Applications Mobile


                                    CVE-2026-8945

Lire l'article

medium 6.5

26/05/2026

Vulnérabilité medium détectée - CVE-2026-8951

Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151.

Android Applications Mobile


                                    CVE-2026-8951

Lire l'article

1 2 3