42118 matches found
CVE-2026-61884
The web management interface of Tycon Systems TPDIN-Monitor-WEB2 does not perform server-side validation of credentials during the login process. By submitting empty values for both credential fields, an unauthenticated remote attacker can bypass the authentication check and establish a valid...
CVE-2026-61884
Technical details are not publicly available in the provided documents. Monitor for updates from NVD/CVE and trusted advisories to confirm affected versions, root cause specifics, and remediation.
CVE-2026-55985
CVE-2026-55985 affects Tycon Systems TPDIN-Monitor-WEB2: the web management interface stores and displays system credentials in cleartext on a configuration page accessible to authenticated users. This exposure enables anyone with access to the administrative dashboard to read credentials, potent...
CVE-2026-55985 Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information
The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...
GHSA-45RX-2JWX-CXFR vulnerabilities
Vulnerabilities for packages: langfuse, kibana, gemini-cli, langfuse-fips, cadence-web, librechat...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
CVE-2026-64645 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
AWS CLI: Overly permissive File Permissions
Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...
EUVD-2026-41116
AWS CLI: Overly permissive File Permissions...
CVE-2026-64209
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...
USN-8605-1 linux-azure-fde-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8605-1: Linux kernel (Azure CVM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8604-1 linux-azure-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8604-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
CVE-2026-55831 vulnerabilities
Vulnerabilities for packages: spark, pinot, logstash-fips, kserve-modelmesh, strimzi-kafka-operator-fips, infinispan, flyway-fips, druid, spark-kubernetes-operator, kafka-bridge-fips, kayenta-fips, flyway, apache-activemq-artemis, keycloak, wavefront-proxy, camunda-zeebe, strimzi-kafka-operator,...
CVE-2026-59898 vulnerabilities
Vulnerabilities for packages: spark, pinot, logstash-fips, kserve-modelmesh, strimzi-kafka-operator-fips, infinispan, flyway-fips, druid, spark-kubernetes-operator, kafka-bridge-fips, kayenta-fips, flyway, apache-activemq-artemis, keycloak, wavefront-proxy, camunda-zeebe, strimzi-kafka-operator,...