The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

GHSA-R7WM-3CXJ-WFF9 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, gradle, wildfly...

GHSA-5QHF-9PHG-95M2 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails...

GHSA-V56Q-MH7H-F735 vulnerabilities

Vulnerabilities for packages: rancher-api-ui...

CVE-2026-59880 vulnerabilities

Vulnerabilities for packages: rancher-api-ui...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-956X-8GVW-WG5V vulnerabilities

Vulnerabilities for packages: checkov...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: argo-workflows...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard valid...

CVE-2026-59678

CVE-2026-59678 : An reported Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any user to mount/unmount arbitrary file systems and modify network settings via NetworkManager. Affected: PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe. Impact includes local pri...

PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting

PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary code via the X-Forwarded-Host Header. id: CVE-2022-24181 info: name: PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting author: lucasljm2001,ekrause severit...

Kaseya Virtual System Administrator - Open Redirect

Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. id: CVE-2015-286...

CVE-2026-38764

An escalation-of-privileges issue in Protegent 360 v2.0.0.4 from Unistal Systems Pvt. Ltd. is observed, exploitable locally via the kernel driver pgsecdl.sys. The available descriptions consistently cite local privilege escalation through that driver. No concrete exploit chains, affected version ...

EUVD-2026-48432

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38763

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: glow, crossplane-provider-aws-cloudcontrol, vale, nuclei, listmonk...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: infinispan, gradle, zookeeper...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: glow, nuclei, vale...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: polaris, q, cloudflared, kubebuilder, cis-operator, kubernetes-dashboard-api, azurefile-csi, cilium-certgen, pdfcpu, nfpm, harbor-cli, newrelic-nri-kube-events, atlantis, smokescreen, chisel, cue, openbao, nri-mysql, hugo, sbomqs, timoni, frp,...

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)

Executive summary Qualys Threat Research Unit TRU identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on...