Lucene search
+L

90845 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Kibana 9.4.x < 9.4.5 Missing Authorization (ESA-2026-147)

The version of Kibana installed on the remote host is 9.4.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-147 advisory. - Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization contro...

5.5CVSS0.00206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

SAP NetWeaver AS ABAP Missing Authorization Check (3772838)

The version of SAP NetWeaver AS ABAP detected on the remote host is affected by a missing authorization check vulnerability as referenced in SAP Security Note 3772838: - Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker...

4.3CVSS0.00168EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/09 12:00 a.m.4 views

ALSA-2026:66204 Important: python-lxml security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.2CVSS0.0024EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/09 12:00 a.m.7 views

CVE-2026-75308

yshopmall versions up to and including 3.3 contain a Cross-Site Scripting (XSS) vulnerability in the file upload endpoint /api/upload . The endpoint lacks file type validation , allowing attackers to upload files of arbitrary types, including HTML, JSP, and other executable files . This can enabl...

0.00137EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.10 views

PT-2026-88652

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

9.8CVSS0.00474EPSS
SaveExploits12References234
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

RHEL 9 : python-lxml (RHSA-2026:66204)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:66204 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

8.2CVSS0.0024EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-87522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially...

6.5CVSS0.00299EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-87543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolatio...

4.3CVSS0.00189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-87537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially...

8.1CVSS0.00302EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.8 views

PT-2026-88634

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

9.8CVSS0.00474EPSS
SaveExploits12References234
Arista
Arista
added 2026/09/09 12:00 a.m.13 views

Security Advisory 0150

Security Advisory 0150 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access...

SaveExploits0Affected Software1
Cvelist
Cvelist
added 2026/09/09 12:00 a.m.28 views

CVE-2026-79324

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 mageplaza/module-gdpr through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by iterating the address id, via a GET request to...

0.0032EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.9 views

PT-2026-88920

Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. I...

9.8CVSS0.00777EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-87441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome...

6.5CVSS0.00263EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-87605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged socia...

5.3CVSS0.00176EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-87556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page...

4.3CVSS0.00282EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-87429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass syst...

6.5CVSS0.00306EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-87534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system...

9.8CVSS0.00214EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/09 12:00 a.m.15 views

CVE-2026-79324

A missing authorization flaw in the Address Delete controller of the Mageplaza GDPR extension for Magento 2 (mageplaza/module-gdpr) through version 4.2.9 allows a remote, unauthenticated attacker to delete any customer's saved address via a simple GET request to /customer/address/delete/id/{id}. ...

7.5CVSS0.0032EPSS
SaveExploits0References2Affected Software1
Arista
Arista
added 2026/09/09 12:00 a.m.6 views

Security Advisory 0179

Security Advisory 0179 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-86106 CVSSv3.1 Base Score: 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 8.7...

SaveExploits0
Rows per page
Query Builder