60820 matches found
CVE-2026-65583: Insufficient Verification of Data Authenticity
Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks issuer/subject/audience/time and subjwk binding, enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in...
FreeBSD : jenkins -- multiple vulnerabilities (9096f6e4-3a2f-4d16-89fb-f909aa0a7760)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9096f6e4-3a2f-4d16-89fb-f909aa0a7760 advisory. Jenkins Security Advisory 2026-08-05: Tenable has extracted the preceding description block...
CVE-2026-48080: Exposure of Sensitive Information to an Unauthorized Actor
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the GET /api/tenants/id endpoint returns the full tenant record to any authenticated TENANTADMIN of that tenant, including the databaseUrl field. This field contains...
RockyLinux 8 : kernel-rt (RLSA-2026:49851)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49851 advisory. kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux8.10 - KVM: s390: Limit adapter indicator access...
EulerOS 2.0 SP13 : sudo (EulerOS-SA-2026-3002)
According to the versions of the sudo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not...
GHSA-42CJ-M3VJ-89WV
creationtimestamp| type| source ---|---|--- 2026-08-05 22:32:39+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7 2026-08-06 00:00:18+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7...
Exploit for Use of Uninitialized Resource in Linux Linux_Kernel
--- CVE-2026-23003 – Cross‑Chain Bridge Message Forging via...
GHSA-H7F7-VCPH-W379 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-WJCP-QJJM-R7W3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-58FF-PXWR-4JQ2 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F4QF-989F-24QQ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17897 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17941 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17759 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17689 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-HV4H-FF48-P67R vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XFJ2-R3X7-44MR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RW7F-3QV6-GP4Q vulnerabilities
Vulnerabilities for packages: chromium...