Netcore NR268 CGI User Ok Data Compromise

The vulnerability of the userok function in the CGI interface of Netcore NR268 microprogramming systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Network Device Enrollment Service Code Execution

The vulnerability of the Network Device Enrollment Service NDES for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ServiceWorker Access Information Disclosure

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

Navigation Component Google Chrome Microsoft Edge Protected Information

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Input component in Google

The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Controls Component Compromise Protected Information

The vulnerability of the Controls component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

SiteIsolation Component Google Chrome Microsoft Edge Protected Information

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Preload Component Access Information Disclosure

The vulnerability of the Preload component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

TabStrip Component DoS

The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

SiteIsolation Component Google Chrome Microsoft Edge Protected Information

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Google Chrome Edge FileSystem Data Compromise

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Edge GetUserMedia Information Disclosure

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

Extensions Component Compromise Protected Information

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

Transactions Platform XSS

The vulnerability of the Transactions Platform web browsers Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

mpfddecode function in the Data Compromise

The vulnerability of the mpfddecode function in the bootloaderregion.bin file of the Emergency HTTP Recovery Server component of the D-Link DCS-930L Wi-Fi camera software is related to insufficient data authentication checks. Exploiting this vulnerability could allow an attacker to compromise the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130123 advisory. Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through...

Ivanti Connect Secure 22.8R2.x < 22.8R2.5 / 25.1.0.x / 25.1.1.x < 25.1.1.2 / 25.1.2.x < 25.1.3.0 Authentication Bypass (CVE-2026-104935)

The Ivanti Connect Secure install on the remote host is 22.8R2.x prior to 22.8R2.5, 25.1.0.x or 25.1.1.x prior to 25.1.1.2, or 25.1.2.x prior to 25.1.3.0. It is, therefore, affected by an authentication bypass by spoofing vulnerability: - An authentication bypass by spoofing in Ivanti Connect...

Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm (CVE-2026-21718)

An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system. This plugin only works with Tenable.ot. Please visit...

Linux Distros Unpatched Vulnerability : CVE-2026-93582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER...

SonicWALL Global Management System (GMS) < 9.4 Multiple Vulnerabilities (SNWLID-2024-0007)

The version of SonicWALL Global Management System GMS running on the remote host is prior to 9.4. It is, therefore, affected by multiple vulnerabilities: - The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity XXE injection, potentially resulting in the...