44387 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-65901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers...
Linux Distros Unpatched Vulnerability : CVE-2026-64332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising...
GHSA-Q53C-4PRM-W95Q Shescape: Home-directory disclosure in assignment context on Unix with Dash
Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Dash, or true when the default shell is Dash, using the escape and escapeAll APIs in assignments prefixed to a command. An attacker may be able to obtain the location of the home directory and, depending on h...
GHSA-6V4M-FW66-8R4X Shescape: Path disclosure on Unix with Zsh
Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST exacerbate the problem. In certain case, an attacker can leverage home directory...
CVE-2026-61884
The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...
CVE-2026-61884
Technical details are not publicly available in the provided documents. Monitor for updates from NVD/CVE and trusted advisories to confirm affected versions, root cause specifics, and remediation.
CVE-2026-61884 Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function
The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...
CVE-2026-55985 Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information
The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...
CVE-2026-55985
CVE-2026-55985 affects Tycon Systems TPDIN-Monitor-WEB2: the web management interface stores and displays system credentials in cleartext on a configuration page accessible to authenticated users. This exposure enables anyone with access to the administrative dashboard to read credentials, potent...
CVE-2026-55985 Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information
The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...
CVE-2026-55985
The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...
GHSA-45RX-2JWX-CXFR vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips, cadence-web, gemini-cli, kibana, librechat...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-64645 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
MINI-MW2R-RFR2-67X9
Bulletin has no description...
AWS CLI: Overly permissive File Permissions
Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...
