CWE-200

7 published stories · 1 KEV

• CVE-2026-106237 — CVE-2026-106237 — Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass s… (37/100)
• CVE-2026-102267 — pyjwt project pyjwt: PyJWT is a Python implementation of JSON Web Token standards. (35/100)
• CVE-2026-86419 — misp-project misp: Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed r… (27/100)
• CVE-2026-54489 — CVE-2026-54489 — Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitiv… (38/100)
• CVE-2026-70478 — flowiseai flowise: Flowise is a drag & drop user interface to build a customized large language model flow. (35/100)
• CVE-2026-13697 — nodejs undici: undici's cache interceptor mishandles malformed Cache-Control private directives. (35/100)
• CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (60/100)