599973 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-76235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie,...
EUVD-2026-62479
The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...
Oracle MySQL ODBC Connector 26.7.0 < 26.7.1 (August 2026 CSPU)
The 26.7.0 versions of MySQL Connector/ODBC installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is...
ROS-20260819-73-0042
The vulnerability in Tomcat10 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-18692
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to b...
UBUNTU-CVE-2026-23938
An authenticated administrator is able to crash Zabbix server or proxy...
Linux Distros Unpatched Vulnerability : CVE-2026-18691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used...
CVE-2026-74963
Same-origin policy bypass in the Networking: Cookies component. This v...
EUVD-2026-62480
The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...
CVE-2026-50720
Ingenic T31 SoC boot ROM compares only one 32-bit word of RSA signature output against SHA-256 digest instead of full data, enabling SPL image forgery with ~2/3 success probability by attackers with physical boot-media access. Validated on Wyze Video Doorbell v2 (T31X). No patch or workaround det...
Linux Distros Unpatched Vulnerability : CVE-2026-70906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allo...
ROS-20260819-73-0041
The vulnerability in Tomcat is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...
Oracle MySQL Cluster 9.x < 9.7.3 (August 2026 CSPU)
The versions of MySQL Cluster installed on the remote host are affected by a vulnerability as referenced in the August 2026 CSPU advisory. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.0-8.0.48, 8.4.0-8.4.11...
ROS-20260819-73-0043
The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PT-2026-78345
Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...
UBUNTU-CVE-2026-68939
Pyenv provides simple Python version management. Prior to 2.8.0, isve...
CVE-2026-50719
Ingenic T41/T32/T40/A1 SoC boot ROMs execute an attacker-controlled init table from the SPL header before secure boot verification, using 32-bit writes to disable SRAM-resident secure boot state, allowing unsigned boot code. Hardware-validated on T41; ROM analysis confirms behavior on other chips...
Oracle Database Server (August 2026 CSPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32,...