28980 matches found
Cisco Identity Services Engine (cisco-sa-ise-xss-964cdxW5)
According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct cross- site...
Cisco Identity Services Engine (cisco-sa-ise-xss-9TDh2kx)
According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the...
PT-2026-3159
Name of the Vulnerable Software and Affected Versions TotalAV version 5.15.69 Description TotalAV version 5.15.69 contains an unquoted service path issue in multiple system services running with LocalSystem privileges. An attacker can place malicious executables in specific unquoted path segments...
PT-2026-3150
Name of the Vulnerable Software and Affected Versions Brother BRPrint Auditor version 3.0.7 Description The software contains an unquoted service path vulnerability in its Windows service configurations. This allows local attackers to potentially execute arbitrary code. Attackers can exploit...
PT-2026-3186
Name of the Vulnerable Software and Affected Versions Canon Satera LBP670C Series/Satera MF750C Series versions v06.02 and earlier Canon Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLA...
PT-2026-3069
Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC affected versions not specified Description A flaw exists in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive...
org.sonatype.nexus.api.rest:nexus-api-rest-selfhosted (>=3.81.0-08 <=3.87.2-01), org.sonatype.nexus.assemblies:nexus-base-overlay (>=3.60.0-02 <=3.77.2-02) +49 more potentially affected by CVE-2026-0600 via org.sonatype.nexus:nexus-repository-services (>=3.22.0-01 <=3.87.2-01)
org.sonatype.nexus:nexus-repository-services MAVEN version =3.22.0-01, =3.81.0-08, =3.60.0-02, =3.22.0-01, =3.22.0-01, =3.22.0-01, =3.22.0-01, =3.23.0-01, =3.77.0-08, =0.0.8, =3.22.0-01, =0.0.5, =0.0.2, =3.22.0-01, =0.0.7, =1.0.0, =3.31.1-01 and more Source cves:...
New China Linked VoidLink Linux Malware Targets Major Cloud Providers
Researchers have discovered VoidLink, a sophisticated new Linux malware framework designed to infiltrate AWS, Google Cloud, and Azure. Learn how this Chinese-affiliated toolkit uses adaptive stealth to stay hidden...
CVE-2026-20865
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20862
Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally...
CVE-2026-20874
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20924
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20873
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20918
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20861
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20867
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20877
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20923
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...