323786 matches found
PT-2026-87821
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...
PT-2026-87824
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network...
PT-2026-87017
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...
PT-2026-87441
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
PT-2026-87576
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
PT-2026-87297
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
PT-2026-87406
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-70873)
The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-70873 advisory. - An information disclosure issue in the zipfileInflate function in the zipfile extension in...
RHEL 9 : firefox (RHSA-2026:65105)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65105 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
RHEL 9 : firefox (RHSA-2026:65103)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65103 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
RHEL 8 : firefox (RHSA-2026:64814)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:64814 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2025-70873)
The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-70873 advisory. - An information disclosure issue in the zipfileInflate function in the zipfile extension in...
Fedora 44 : libsoup3 (2026-3f60ccf61f)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3f60ccf61f advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...
PT-2026-88535
Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
KLA91265 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
PT-2026-87862
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...
PT-2026-87124
AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by accessing the endpoint without authentication. Attackers can enumerate private, unlisted, and group-restricted live...
PT-2026-87791
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
PT-2026-87171
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...