GO-2026-6185 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-59711 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard-fips, opensearch-dashboards-fips...

GHSA-332R-8PMF-8M9P vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58472 vulnerabilities

Vulnerabilities for packages: wget...

GHSA-XG4H-6GFC-H4M8 vulnerabilities

Vulnerabilities for packages: dapr, kine...

GHSA-WMXR-6J5F-838P vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-2092 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-40687 vulnerabilities

Vulnerabilities for packages: exim...

GO-2026-5966 vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-76799

A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...

GHSA-X5MV-8WGW-29HG vulnerabilities

Vulnerabilities for packages: ascan...

CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access

A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...

EUVD-2026-63191

A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...

CVE-2026-76799

code-projects Login Registration System 1.0 exposes the SQL database backup file at /loginsystem/database/login_registration_system.sql via the SQL Database Backup Handler, allowing remote unauthenticated attackers to read sensitive database contents. A public PoC exploit exists; CVSS 4.0 rates s...

EUVD-2026-63168

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

EUVD-2026-62967

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure a non-secure Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise that causes the connector to send...

EUVD-2026-62961

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedulesearch capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk AI Toolkit does not mark the apply...

EUVD-2026-62965

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API and influence responses from a Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise could cause the connector to retry faile...

EUVD-2026-62957

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit generates or stores credentials for...

EUVD-2026-62955

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...