597866 matches found
PT-2026-71546
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
UBUNTU-CVE-2026-72693
openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...
UBUNTU-CVE-2026-18103
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI Open Management Application Programming Interface port, especially if not secured with TSIG Transaction Signature key authentication, could send a specially crafted lease creation request. This request, containing...
ROS-20260813-73-0042
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0035
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0025
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux Distros Unpatched Vulnerability : CVE-2026-48551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie. An...
Linux Distros Unpatched Vulnerability : CVE-2026-53801
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumera...
Linux Distros Unpatched Vulnerability : CVE-2026-19694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19694 Note that Nessus relies on the presence of the package as reported by the...
PT-2026-71623
rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir to the module root at session initialization withou...
PT-2026-71629
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
PT-2026-71554
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
PT-2026-71600
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
PT-2026-71910
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass DNS pinning protections through DNS rebinding attacks. Attackers can configure hostnames that resolve to public...
PT-2026-71701
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
PT-2026-71512
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
PT-2026-71814
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...
PT-2026-71841
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
PT-2026-71705
Name of the Vulnerable Software and Affected Versions CyberPanel versions prior to 3.0.0 Description The WebTerminal FastAPI SSH service contains a hard-coded JSON Web Token JWT secret. This allows unauthenticated remote attackers to forge valid authentication tokens by signing them with the...