6614 matches found
openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side
A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability...
Important: Red Hat Security Advisory: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
SUSE CVE-2026-55588
ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referrer traversal does not track visited descriptors, so a malicious OCI registry that returns a cyclic referrer graph causes unbounded...
ROS-20260909-73-0057
The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data through a specially created HTML page...
CVE-2026-71802
A stored Cross-Site Scripting XSS vulnerability exists in the announcement preview component of REBUILD 4.4.3. Although the announcement content undergoes HTML escaping on the server side, the client-side preview code reverses the escaped entities using jQuery's html.text method and subsequently...
PT-2026-88940
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading ...
CVE-2026-78490: Improper Restriction of Excessive Authentication Attempts
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading ...
RHEL 10 : openssh (RHSA-2026:65900)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65900 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary...
CVE-2026-84869
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...
EUVD-2025-210872
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
EUVD-2026-74053
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted...
CVE-2026-66305
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
CVE-2026-66305
CVE-2026-66305 is a spoofing vulnerability in Skype for Business Server (Subscription Edition, 2019, and 2015) caused by the use of client-side authentication , which allows an authorized attacker to perform spoofing over a network. The CVSS v3.1 score is 7.1 (HIGH) , with high integrity impact a...
EUVD-2026-73937
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
Skype for Business Spoofing Vulnerability
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
grafana: Grafana: Stored Cross-Site Scripting via malicious dashboard field name
A flaw in Grafana allows authenticated 'Editor' users to inject malicious scripts into a table panel's field names. Viewing the compromised dashboard executes the script in the victim's browser, risking data theft or client-side attacks...
PT-2026-88284
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
CVE-2026-66305: Use of Client-Side Authentication
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
PT-2026-87070
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...
