70576 matches found
SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:3824-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3824-1 advisory. This update for kubernetes rebuilds it against the current go security release. Tenable has extracted the preceding description block direct...
Linux Distros Unpatched Vulnerability : CVE-2026-33245
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential...
Debian dla-4763 : amqp-tools - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4763 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4763-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-18703
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based...
PT-2026-84137
Name of the Vulnerable Software and Affected Versions yast2-auth-client affected versions not specified Description An OS command injection flaw exists in the Auth::AuthConf function within src/lib/auth/authconf.rb. The issue occurs when the software assembles Samba net ads join, net ads lookup -...
Fedora 44 : rpki-client (2026-fb17adc9de)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb17adc9de advisory. rpki-client 9.9 - Introduce a backoff retry mechanism for non-functional CAs, eventually settling on retrying broken CAs only once per day. Backoff helps...
ROS-20260831-73-0003
The vulnerability of the cryptorsacommon function in the libfreerdp/crypto/crypto.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
PT-2026-84136
Name of the Vulnerable Software and Affected Versions yast2-samba-client versions prior to 5.0.5 Description Improper neutralization of special elements used in an OS command allows an attacker to execute arbitrary commands as root on a machine being joined to a domain. This occurs when the...
ROS-20260831-73-0002
The vulnerability of the freerdpclientrdpfileapplytoSettings function in the RDP client FreeRDP is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted .rdp file...
Actor Component DoS
The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...
Extensions Component Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...
DevTools DoS
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Extensions Component Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...
Extensions Component Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...
RHEL 8 : libXfont2 (RHSA-2026:61756)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61756 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libxfont2: Font Server Client encoding Out-Of-Bounds Read/Write CVE-2026-59679...
ROS-20260831-73-0012
The vulnerability of the SimpleTrustManagerFactory component in the TSL client of the networking application development framework for Netty involves errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle”...
C-MOR 6.0104 - Cross-Site Scripting (XSS)
Exploit Title: C-MOR 6.0104 - Cross-Site Scripting XSS Google Dork: N/A Date: 2026-07-23 Exploit Author: Samir Shamdin Alb Cyber Guards Vendor Homepage: https://www.c-mor.com Software Link: https://www.c-mor.com/ Version: = 6.0104 Tested on: C-MOR Video Surveillance V6.0104 CVE: CVE-2026-51133 1...
Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2026-2115)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2115 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel...
Amazon Linux 2 : libXfont2, --advisory ALAS2-2026-3889 (ALAS-2026-3889)
The version of libXfont2 installed on the remote host is prior to 2.0.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3889 advisory. A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font...
SUSE SLES15: kubernetes1.33-client / kubernetes1.33-client-bash-completion / etc (SUSE-SU-2026:3823-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3823-1 advisory. This update for kubernetes-old rebuilds it against the current go security release. Tenable has extracted the preceding description block...