282 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-27855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP...
EUVD-2026-16563
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP reply is valid. An attacker able to observe an OTP exchange is able to log in as the user. If...
ALPINE-CVE-2026-27855
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP reply is valid. An attacker able to observe an OTP exchange is able to log in as the user. If...
CVE-2026-27855
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP reply is valid. An attacker able to observe an OTP exchange is able to log in as the user. If...
CVE-2026-27855
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP reply is valid. An attacker able to observe an OTP exchange is able to log in as the user. If...
CVE-2026-27855
Dovecot OTP authentication is vulnerable to a replay attack under specific conditions: if auth cache is enabled and the username is altered in passdb, OTP credentials can be cached so that the same OTP response remains valid. An attacker who observes an OTP exchange can log in as the targeted use...
CVE-2026-27855
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP reply is valid. An attacker able to observe an OTP exchange is able to log in as the user. If...
CVE-2025-55108 BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution
The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled i.e. in the default configuration. NOTE: The vendor believes that this vulnerability only occurs when...
CVE-2025-27060 Untrusted Pointer Dereference in TZ Firmware
Memory corruption while performing SCM call with malformed inputs...
EUVD-2004-0869
Malware in sbrugna...
EUVD-2005-3401
Malware in sbrugna...
EUVD-2023-25979
Malicious code in bioql PyPI...
EUVD-2024-40306
Malicious code in bioql PyPI...
EUVD-2023-28919
Malicious code in bioql PyPI...
EUVD-2023-31941
Malicious code in bioql PyPI...
EUVD-2025-10223
Malicious code in bioql PyPI...
EUVD-2025-10161
Malicious code in bioql PyPI...
EUVD-2023-31942
Malicious code in bioql PyPI...
EUVD-2023-28852
Malicious code in bioql PyPI...
The vulnerability of the Secure Channel component of the Cryptographic Services service in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Secure Channel component of the Cryptographic Services service in Windows operating systems is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...