44602 matches found
CVE-2026-61419
Dell ThinOS 10, versions prior to 260510.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-61419
Dell ThinOS 10 versions prior to 2605_10.2518 are affected by an Improper Access Control vulnerability. A low-privileged attacker with local access can exploit this flaw to gain unauthorized access , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , ve...
EUVD-2026-65086
Dell ThinOS 10, versions prior to 260510.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-61419
Dell ThinOS 10, versions prior to 260510.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
GitPython: GitPython: Arbitrary file read via TagReference.create()
A flaw was found in GitPython. A remote attacker with low privileges can exploit a vulnerability in the TagReference.create function, where a positional reference parameter bypasses a security guard. This allows the attacker to supply a specially crafted reference value, such as --file=, to read...
CVE-2026-21756
creationtimestamp| type| source ---|---|--- 2026-08-24 15:51:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mttnverusu2b...
CVE-2026-78387
RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...
EUVD-2026-64890
RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...
CVE-2026-78387 RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification
RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...
EUVD-2026-64802
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
PT-2026-81008
Name of the Vulnerable Software and Affected Versions Dell ThinOS 10 versions prior to 2605 10.2518 Description An improper access control issue exists where a low privileged attacker with local access could potentially gain unauthorized access. Recommendations Update Dell ThinOS 10 to version 26...
PT-2026-80894
RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...
Adapter-Based Few-Shot Continual Learning for Malicious Packet Recognition
The continual evolution of malware variants necessitates detection systems that can adapt to new threats without retraining from scratch. However, continually updating models on new data often leads to catastrophic forgetting, where previously learned knowledge is overwritten. While continual...
Fedora 45 : openvkl / rkcommon (2026-ca74beef5f)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ca74beef5f advisory. Update to the latest version to fix CVE-2026-21399 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...
Johnson Controls Metasys 12.x / 13.x / 14.x < 14.1.5 / 15.x < 15.0.1 Cross-Site Scripting (CVE-2026-34491)
A low-privilege user can inject a malicious XSS payload into the Johnson Controls Metasys UI via a crafted URL. The payload persists across logins and executes in the browser context of other users, including administrators. Successful exploitation of this vulnerability could allow a low-privileg...
EUVD-2026-64651
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-controlled selector strings via query, matches, or selector-based transforms, run selector matching over very large untrusted documents,...
CVE-2026-77116
Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...
CVE-2026-78155: Untrusted Search Path
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges...
