Lucene search
K

12363 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010950 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device li...

5.7AI score0.00177EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012970 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: always restore the old font data in fbcondosetfont Commit a5a923038d70 fbdev: fbcon:...

5.5CVSS6.1AI score0.00329EPSS
Exploits0References3
NVD
NVD
added 2026/04/20 10:16 p.m.2 views

CVE-2026-0930

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

4.3CVSS0.00172EPSS
Exploits0References1
CVE
CVE
added 2026/04/20 9:28 p.m.5 views

CVE-2026-0930

CVE-2026-0930 affects wolfSSHd on Windows and describes a potential read-out-of-bounds in the handling of a terminal resize. An authenticated user could trigger the out-of-bounds read after establishing a connection, leaking adjacent stack memory to the pseudo-console output. Public sources (NVD;...

4.3CVSS5.8AI score0.00172EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.3 views

PT-2026-33853

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

2.3CVSS5.8AI score0.00172EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2026/04/18 12:0 a.m.4 views

VulnCheck KEV: CVE-2026-27174

MajorDoMo aka Major Domestic Module allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect call that lacks an exit statement, allowing unauthenticated requests to reach th...

9.8CVSS6.7AI score0.06996EPSS
In wildExploits4References26
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007577 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctlKDFONTOP th...

7.1CVSS6.1AI score0.0021EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007456 advisory. In the Linux kernel, the following vulnerability has been resolved: vcscreen: reload load of struct vcdata pointer in vcswrite to avoid UAF After a call to...

5.8AI score0.00165EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/16 10:21 p.m.6 views

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.10 Vulnerability Details CVEID:CVE-2026-26961 DESCRIPTION: Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser extracts the boundary parameter from...

7.5CVSS5.8AI score0.0043EPSS
Exploits0Affected Software5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 10:9 a.m.5 views

Malicious code in otomi-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9238b0645d7de5b5df1ba2ccc3d6a6d2d476b29cfd3a7eaa583ec4c32c7839 The package otomi-console was found to contain malicious code...

5.7AI score
Exploits0
OSV
OSV
added 2026/04/16 10:9 a.m.4 views

MAL-2026-2788 Malicious code in otomi-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9238b0645d7de5b5df1ba2ccc3d6a6d2d476b29cfd3a7eaa583ec4c32c7839 The package otomi-console was found to contain malicious code...

5.7AI score
Exploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/04/16 8:29 a.m.2 views

Arcserve UDP Console vulnerable to redirect to a dummy URL

Overview UDP Console provided by Arcserve contains the following vulnerability. Incorrectly specified destination in a communication channel CWE-941 - CVE-2026-40118 Shingo Ando reported this vulnerability to IPA, IPA reported it to Arcserve, and JPCERT/CC coordinated with Arcserve to publish the...

6.3CVSS6.6AI score0.00178EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/16 6:31 a.m.1 views

EUVD-2026-23192

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing...

6.3CVSS5.8AI score0.00178EPSS
Exploits0References3
NVD
NVD
added 2026/04/16 5:16 a.m.1 views

CVE-2026-40118

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing...

6.3CVSS0.00178EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/16 4:19 a.m.21 views

CVE-2026-40118

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing...

6.3CVSS0.00178EPSS
Exploits0References2
CVE
CVE
added 2026/04/16 4:19 a.m.8 views

CVE-2026-40118

CVE-2026-40118 involves Arcserve’s UDP Console. The issue is an incorrectly specified destination in a communication channel: if a user configures the activation server hostname to a dummy URL, the product may contact that dummy domain, potentially causing information disclosure. The provided doc...

6.3CVSS6.6AI score0.00178EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/16 4:19 a.m.3 views

CVE-2026-40118

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing...

6.3CVSS5.8AI score0.00178EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/16 4:19 a.m.1 views

CVE-2026-40118

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing...

6.3CVSS6.6AI score0.00178EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/16 12:0 a.m.4 views

Arcserve UDP Console 安全漏洞

Arcserve UDP Console is a data protection management console developed by the American company Arcserve. There are security vulnerabilities in Arcserve UDP Console. These vulnerabilities stem from incorrect target designation in the communication channel, which may lead to unexpected communicatio...

6.3CVSS6.6AI score0.00178EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/16 12:0 a.m.10 views

MuPDF 安全漏洞

MuPDF is an open-source software library written in C language by MuPDF. It is used to render pages as bitmaps, but it also provides support for other operations such as searching and listing directories and links. MuPDF has a security vulnerability that stems from the failure to clean up PDF...

4.8CVSS5.9AI score0.00166EPSS
Exploits0References6
Rows per page
Query Builder