CVE-2026-109786

The fail2ban software (versions 0.10.5 through 1.1.1 before commit ddd879d ) is vulnerable in its sshd filter (config/filter.d/sshd.conf). The filter incorrectly accepts an "on " suffix after the host address. Because OpenSSH logs usernames verbatim, a remote unauthenticated attacker can provide ...

PT-2025-45868

Slack Nebula may accept arbitrary source IP addresses in github.com/slackhq/nebula...

CVE-2025-62820: Unprotected Alternate Channel

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

CVE-2009-5120

The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitrary source IP addresses, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via UTF-7 text to the 404...

CVE-2009-5120

The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitrary source IP addresses, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via UTF-7 text to the 404...

CVE-2007-3320

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact...