287315 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-92005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...
Cisco Secure Email and Web Manager DoS
The vulnerability of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
PaperCut MF Web Interface Data Read Modify
The vulnerability in the web-based interface for controlling printing control software in PaperCut MF and PaperCut NG is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain read-only access and modify data...
Cisco Identity Services Engine RCE
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root leve...
Cisco Secure Email Resource Control DoS
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...
Cisco Secure Email and Web Manager Access Control Bypass
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass existing security mechanisms remotely...
Cisco Secure Email and Web Manager Code Execution
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient checks for message or data structure correctness. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
Cisco Secure Email and Web Manager Relative Path Handling
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in the handling of relative paths. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
Linux Distros Unpatched Vulnerability : CVE-2026-83602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and...
CVE-2026-86934: Authorization Bypass Through User-Controlled Key
An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. This vulnerability is addressed in FileMaker Serv...
Linux Distros Unpatched Vulnerability : CVE-2026-91719
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security...
PT-2026-105052
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler deps/rabbitmq web mqtt/src/rabbit web mqtt handler.erl:104 nor the Web-STOMP handler deps/rabbitmq web stomp/src/rabbit web stomp handler.erl:102 validates the...
CVE-2026-67405: Missing Origin Validation in WebSockets
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler deps/rabbitmqwebmqtt/src/rabbitwebmqtthandler.erl:104 nor the Web-STOMP handler deps/rabbitmqwebstomp/src/rabbitwebstomphandler.erl:102 validates the Origin head...
PT-2026-97587
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.15 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.3.0 Description The Web-MQTT handler and the Web-STOMP handler do not validate...
CVE-2026-94500: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...
CVE-2026-94168: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Premium Addons for Elementor = 4.11.105 versions...
Linux Distros Unpatched Vulnerability : CVE-2026-91732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged...
CVE-2026-92929: Authentication Bypass by Spoofing
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...
