135077 matches found
Alibaba Cloud Linux 3 : 0203: cups (ALINUX3-SA-2026:0203)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0203 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-34980: OpenPrinting CUPS is an open source...
Google Chrome < 150.0.7871.128 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 150.0.7871.128. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop049796704 advisory. - Use after free in Aura. CVE-2026-15905 - Use after free in...
KLA91155 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in CameraCapture can be exploited remotely to execute...
Ubuntu 24.04 LTS : Linux kernel (HWE) vulnerabilities (USN-8545-1)
"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8545-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...
PT-2026-60597
Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting XSS issue. This allows an unauthorized attacker to perform spoofing over a network...
CVE-2024-32386
CVE-2024-32386 affects Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042, with a directory traversal vulnerability that allows an adjacent attacker to obtain sensitive information through the SNMP update mechanism. The CVSSv3.1 base score is 7.3 (HIGH) with attack vector ADJACENT, low atta...
PT-2026-60598
Name of the Vulnerable Software and Affected Versions Windows Terminal affected versions not specified Description An integer overflow or wraparound occurs in Windows Terminal, which could allow an unauthorized attacker to execute code over a network. There have been reports of increased actor...
SGLang contains a vulnerable pickle deserialization vulnerability through the expert-parallel subsystem
Overview A Pickle deserialization vulnerability has been discovered within the SGLang project, enabling an attacker to perform remote code execution RCE on the target vulnerable server. In order for an attacker to exploit this vulnerability, the expert-parallel backup subsystem must be enabled, a...
Google Chrome < 150.0.7871.128 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 150.0.7871.128. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop049796704 advisory. - Use after free in Aura. CVE-2026-15905 - Use after free in...
Amazon Linux 2023 : libnetapi, libnetapi-devel, libsmbclient (ALAS2023-2026-1899)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1899 advisory. If the certificate auto-enrollment GPO is enabled on domain membersboth in Samba's smb.conf and using Windows GPME tool, a CAcertificate may be fetched using a plain HTTP connection and installedin the...
chromium -- security fixes
Chrome Releases reports: This update includes 7 security fixes: 516987782 Critical CVE-2026-15899: Use after free in CameraCapture. 523750584 Critical CVE-2026-15900: Use after free in GPU. 533446300 Critical CVE-2026-15901: Use after free in Network. 522436154 High CVE-2026-15902: Use after free...
The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and client protocols via Netty allows a hacker to induce a service failure.
The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and protocol clients related to Netty involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-8547-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8547-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
GHSA-6F5R-5672-72J7 @andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default
Summary @andrea9293/mcp-documentation-server v1.13.0 documents that a Web UI starts automatically on port 3080. However, the Web UI/API appears to bind to all network interfaces by default :3080 / 0.0.0.0:3080 instead of localhost-only, and its document-management API endpoints do not require...
@andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default
Summary @andrea9293/mcp-documentation-server v1.13.0 documents that a Web UI starts automatically on port 3080. However, the Web UI/API appears to bind to all network interfaces by default :3080 / 0.0.0.0:3080 instead of localhost-only, and its document-management API endpoints do not require...
systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Summary On Linux, systeminformation's networkInterfaces is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive. While collecting per-interface DHCP state, the library reads /etc/network/interfaces and, for every source line it encounters, extracts the path...
GHSA-5XPP-75JX-M839 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Summary On Linux, systeminformation's networkInterfaces is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive. While collecting per-interface DHCP state, the library reads /etc/network/interfaces and, for every source line it encounters, extracts the path...
CVE-2026-53446 Wekan: Server-Side Request Forgery (SSRF) via webhook integration URLs
Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js are stored from user input and later fetched by server/notifications/outgoing.js without applying the existing validateAttachmentUrl private-network checks from...
EUVD-2026-44831
Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js are stored from user input and later fetched by server/notifications/outgoing.js without applying the existing validateAttachmentUrl private-network checks from...
