CVE-2022-32025

creationtimestamp| type| source ---|---|--- 2026-09-15 11:00:51+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31c6441e-f30f-4596-92dc-89053d7d36c0 2026-09-17 10:00:08+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-16 2026-09-23...

CVE-2018-10735

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:04+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4e434f0-da60-4555-9882-9715560ea4cb 2026-09-17...

CVE-2017-17731

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:44+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d89868-ad3a-4d69-bd11-cd0baa9058a2 2026-09-17...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users’ passwords, allowing for full domain takeover...

Linux Distros Unpatched Vulnerability : CVE-2026-75131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN...

Linux Distros Unpatched Vulnerability : CVE-2026-78030

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes the dbmtype and dbmmldbm...

CVE-2026-90456 Use of default credentials in Malcolm

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

Linux Distros Unpatched Vulnerability : CVE-2026-89087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...

Fedora 45 : mingw-openexr (2026-94344a87fb)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-94344a87fb advisory. Update to openexr 3.4.15 resp 3.3.14. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-88059 via @angular/common (>=20.0.0, <=20.3.25)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-88059 Source advisory: OSV:GHSA-P297-FM68-3Q8C...

@amwaljs/checkout-angular (0.2.11), @augustalabs/ki-assistent (>=1.0.8, <=1.0.14) +21 more potentially affected by CVE-2026-88057 via @angular/compiler (>=21.0.0, <=21.2.19)

@angular/compiler NPM version =21.0.0, =1.0.8, =6.1.182-alpha, =6.1.182-alpha, =0.1.0-beta.54, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =1.0.0, =4.4.0-beta.2, =1.0.0-next.27766, =1.0.77-rc.1, =0.0.1, =0.5.11 - foliokit 0.0.0 and more Source cves: CVE-2026-88057 Source advisory:...

3d-card (0.0.2), 4byte-peru-components (1.0.0) +332 more potentially affected by CVE-2026-88057 via @angular/core (>=19.0.0, <=19.2.25)

@angular/core NPM version =19.0.0, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 and more Source cves: CVE-2026-88057 Source advisory: OSV:GHSA-HH8M-FM6V-7CVG...

CVE-2024-2851

creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...

Linux Distros Unpatched Vulnerability : CVE-2026-19816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11363 more potentially affected by CVE-2026-83608 +1 more via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.0.9 and more Source cves: CVE-2026-83608, CVE-2026-83613 Source advisory: OSV:GHSA-27P8-2357-5QQV...

2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4328 more potentially affected by CVE-2026-83613 via @xmldom/xmldom (>=0.7.0, <=0.8.14)

@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83613 Source advisory: OSV:GHSA-8344-3JMQ-59R6...

6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1069 more potentially affected by CVE-2026-83615 via @xmldom/xmldom (>=0.9.0, <=0.9.11)

@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.1.0, =0.2.2 - @aidin36/xmp2js 1.0.0 and more Source cves: CVE-2026-83615 Source advisory: OSV:GHSA-965W-775F-MR7G...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

Linux Distros Unpatched Vulnerability : CVE-2026-18090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image...

VulnCheck KEV: CVE-2026-87491

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...