VulnCheck KEV: CVE-2025-68686

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability CWE-200 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypas...

PT-2026-65113

A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response...

PT-2026-65108

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2021-32084

The CVE-2021-32084 entry describes a vulnerability in Quest KACE Systems Deployment Appliance (SMA) 11.0.273 where API endpoints remain accessible when web console access is restricted by IP/subnet, allowing an attacker who has credentials or API keys to access the API and potentially compromise ...

Xerox Printers Missing Authentication for Critical Function (CVE-2024-12511)

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-68742)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505879; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2026-57989

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

DEBIAN-CVE-2026-15578

Bulletin has no description...

EUVD-2026-49059

Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-57990

Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-57989

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2016-7270

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:14+00:00| seen| https://t.me/KaitNews/1590 2026-07-27 00:01:52+00:00| seen| https://t.me/KaitNews/1590 2026-08-05 21:00:04+00:00| seen| https://t.me/KaitNews/1590 2026-08-06 00:00:10+00:00| seen| https://t.me/KaitNews/1590...

CVE-2017-5060

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:05+00:00| seen| https://t.me/KaitNews/4131 2026-07-27 00:01:46+00:00| seen| https://t.me/KaitNews/4131 2026-08-04 12:00:08+00:00| seen| https://t.me/KaitNews/4131 2026-08-05 00:00:44+00:00| seen| https://t.me/KaitNews/4131...

CVE-2017-0752

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:02+00:00| seen| https://t.me/KaitNews/5271 2026-07-27 00:01:42+00:00| seen| https://t.me/KaitNews/5271 2026-08-04 09:00:05+00:00| seen| https://t.me/KaitNews/5271 2026-08-05 00:00:49+00:00| seen| https://t.me/KaitNews/5271...

CVE-2017-13151

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:53+00:00| seen| https://t.me/KaitNews/6958 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6958 2026-07-29 05:00:05+00:00| seen| https://t.me/KaitNews/6958 2026-07-30 00:03:15+00:00| seen| https://t.me/KaitNews/6958...

Information Exposure

dompdf/dompdf is vulnerable to Information Exposure. The vulnerability is due to insufficient validation of data-URI embedded SVG elements, which allows an attacker to reference local files through the href or xlink:href attributes and exploit differences in file processing behavior to leak...

VulnCheck KEV: CVE-2026-59821

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to creat...

Information Exposure

org.eclipse.jetty, jetty-server is vulnerable to Information Exposure. The vulnerability is due to improper handling of HTTP/1.1 request trailers, where trailers from a previous request are retained and reused across subsequent requests on the same connection, which allows an attacker to access o...

SUSE CVE-2026-64269

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry for the IBWRRDMAWRITE that returns data to the peer. Its length is taken...

CVE-2026-66012 SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check model.CheckAuth with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy...