490112 matches found
CVE-2026-86277 SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file deleteexam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The...
CLSA-2026-1788757894 TuxCare security update for io.airlift:aircompressor (1 CVE)
TuxCare rebuilt io.airlift:aircompressor to address 1 CVE. Fixed in 0.21-tuxcare.1...
[slackware-security] util-linux
New util-linux packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/util-linux-2.42.3-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...
PT-2026-88201
These are all security issues fixed in the perl-Net-DNS-1.570.0-1.1 package on the GA media of openSUSE Tumbleweed...
Slackware Linux 15.0 / current util-linux Multiple Vulnerabilities (SSA:2026-249-03)
The version of util-linux installed on the remote host is prior to 2.42.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-249-03 advisory. New util-linux packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
PT-2026-86627
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...
Oracle Linux 9 : ELSA-2026-62217-0: / libssh (ELSA-2026-622170)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622170 advisory. 0.10.4-19 - Backport CVE patches from 0.11.5 Resolves: RHEL-213033 Resolves: RHEL-213041 Resolves: RHEL-213047 Resolves: RHEL-213081 Resolves:...
Slackware Linux 15.0 / current libpcap Multiple Vulnerabilities (SSA:2026-249-01)
The version of libpcap installed on the remote host is prior to 1.10.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-249-01 advisory. New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
PT-2026-88194
These are all security issues fixed in the insighttoolkit-devel-5.4.7-1.1 package on the GA media of openSUSE Tumbleweed...
UBUNTU-CVE-2026-86219
Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...
SUSE-SU-2026:23628-1 Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...
OPENSUSE-SU-2026:21765-1 Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...
WordPress Bold Page Builder plugin < 5.9.9 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Luka Zimonjic in WordPress Plugin Bold Page Builder versions 5.9.9...
CVE-2026-86218
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14...
CVE-2026-86218
N-central (N-able) is affected by a pre-authentication remote code execution vulnerability in versions prior to 2026.3.1.14 . The CVSS 4.0 base score is 10.0 (CRITICAL) , with high impact across confidentiality, integrity, and availability for both vulnerable and subsequent systems. CISA's SSVC a...
CVE-2026-67276 SSH user impersonation possible in Mikrotik RouterOS
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...
CVE-2017-4878
creationtimestamp| type| source ---|---|--- 2026-09-05 13:00:05+00:00| seen| Telegram/Rye4nFjgPibFUf7HyVjUTP6MPf9VB3fBkIKhegqBZOEZc4 2026-09-06 00:00:45+00:00| published-proof-of-concept| Telegram/Rye4nFjgPibFUf7HyVjUTP6MPf9VB3fBkIKhegqBZOEZc4...
zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
...
WordPress JCH Optimize plugin 4.2.1-5.0.0 - Admin+ Path Traversal vulnerability
Admin+ Path Traversal vulnerability discovered by Krugov Artyom in WordPress Plugin JCH Optimize versions 4.2.1-5.0.0...
