SUSE SLES12 Security Update : pcp (SUSE-SU-2026:3508-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3508-1 advisory. - CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. - CVE-2026-16526: pmdaroot privilege escalati...

About the security content of macOS Sequoia 15.7.9

About the security content of macOS Sequoia 15.7.9 This document describes the security content of macOS Sequoia 15.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Sonoma 14.8.9

About the security content of macOS Sonoma 14.8.9 This document describes the security content of macOS Sonoma 14.8.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

macOS 26.x < 26.6.1 (148170)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.1. It is, therefore, affected by a vulnerability: - An authentication issue was addressed with improved state management. CVE-2026-65400 Note that Nessus has not tested for this issue but has instead relied only o...

EulerOS 2.0 SP13 : mutt (EulerOS-SA-2026-2982)

According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest.CVE-2026-43859 In mutt before 2.3.2, the imapauthgss...

EulerOS 2.0 SP15 : bind (EulerOS-SA-2026-2916)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...

SUSE SLES15: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (SUSE-SU-2026:3506-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3506-1 advisory. - CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. - CVE-2026-16526: pmdaroot...

PT-2026-68882

Name of the Vulnerable Software and Affected Versions WordPress affected versions not specified Description WordPress is subject to a pre-authentication reflected cross-site scripting XSS issue on the login screen. This allows an attacker to execute arbitrary JavaScript in the site origin without...

PT-2026-68772

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.6.1 macOS Sequoia versions prior to 15.7.9 macOS Sonoma versions prior to 14.8.9 Description An authentication bypass exists in the built-in Screen Sharing feature, which allows remote desktop management via th...

WP < 7.0.3 - Subscriber+ Email Change Confirmation Bypass

Description WordPress does not always validate a new email address consistently when a profile is updated, which could allow any authenticated user to change their account email address without completing the ownership confirmation step...

About the security content of macOS Tahoe 26.6.1

About the security content of macOS Tahoe 26.6.1 This document describes the security content of macOS Tahoe 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-2962)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTPS request after a Negotiate-authenticated one,...

N-able N-central authorization issue vulnerability

N-able N-central is a remote monitoring and management system developed by the Canadian company N-able. Versions of N-able N-central prior to 2026.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to bypass authentication processes...

macOS 14.x < 14.8.9 (148172)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.9. It is, therefore, affected by a vulnerability: - An authentication issue was addressed with improved state management. CVE-2026-65400 Note that Nessus has not tested for this issue but has instead relied only o...

EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-2936)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

CVE-2025-63823

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

Missing Authentication for Critical Function

Overview @nuxt/devtools is a Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the nuxt:devtools:rpc. An attacker can execute arbitrary commands on the host system by sending crafted RPC calls to the exposed WebSocket endpoint without...