21581 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-43478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm context in spkmodeput The correct helper...
Linux Distros Unpatched Vulnerability : CVE-2026-43388
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/core: clear walkcontrol on inactive context in damoswalk damoswalk sets ctx-walkcontrol to the caller-provided control structure before checking whethe...
PT-2026-40592
Impact Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity of server island props and slots parameters, but did not bind the ciphertext to its intended component or parameter type. An attacker could replay one component's encrypted props p value as...
Context-Aware Web Attack Detection in Open-Source SIEM Systems Via MITRE ATT&CK-Enriched Behavioral Profiling
Security Information and Event Management SIEM systems aggregate log data from heterogeneous sources to detect coordinated attacks. Traditional rule-based correlation engines struggle to classify multi-step web application attacks because they examine each event without reference to the behaviour...
PT-2026-40685
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC codecs rt1011 where the rt1011 recv spk mode put function incorrectly attempts to retrieve the DAPM Dynamic Audio Power Management context. Using kcontrol in...
PT-2026-40730
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 0.0.0-20260421031503-96dfe0bea474 Description A stored cross-site scripting XSS issue exists in the Bazaar marketplace. The application fails to sanitize the name and version fields in package metadata files such as...
EUVD-2026-29748
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability through specific nginx...
com.agorapulse:gru-micronaut (1.4.0), com.bertramlabs.plugins:asset-pipeline-grails (>=4.5.0, <=4.5.2) +130 more potentially affected by CVE-2026-44241 via io.micronaut:micronaut-context (>=3.10.0, <=3.10.5)
io.micronaut:micronaut-context MAVEN version =3.10.0, =4.5.0, =4.5.2 - dk.glasius:i18n-enums $releaseversion - hu.webarticum.miniconnect:rest 0.7.0 - io.cloudflight.testresources.springboot:springboot-testresources-azurite 0.6.0 -...
com.c0x12c:module-ai-image (>=0.12.0, <=0.16.8), com.c0x12c:module-ai-module-impl (>=0.5.0, <=0.16.8) +667 more potentially affected by CVE-2026-44241 via io.micronaut:micronaut-context (>=4.3.0, <=4.10.21)
io.micronaut:micronaut-context MAVEN version =4.3.0, =0.12.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.2.6, =0.2.5, =0.2.6, =0.5.0, =0.10.0, =0.8.0, =0.5.0, =0.16.8 - com.c0x12c:module-sqs 0.2.5 and more Source cves: CVE-2026-44241 Source advisory: MEND:CVE-2026-44241...
com.agorapulse:micronaut-amazon-awssdk-cloudwatch (>=1.6.0-micronaut-2.0, <=2.2.2-micronaut-3.0), com.agorapulse:micronaut-amazon-awssdk-cloudwatchlogs (>=2.0.8-micronaut-2.0, <=2.2.2-micronaut-3.0) +592 more potentially affected by CVE-2026-44241 via io.micronaut:micronaut-context (>=2.4.0, <=3.8.13)
io.micronaut:micronaut-context MAVEN version =2.4.0, =1.6.0-micronaut-2.0, =2.0.8-micronaut-2.0, =1.6.0-micronaut-2.0, =1.6.0-micronaut-2.0, =1.7.3-micronaut-2.0, =1.6.2-micronaut-2.0, =2.0.0-micronaut-2.0, =1.7.2-micronaut-2.0, =1.6.0-micronaut-2.0, =1.7.3-micronaut-2.0, =1.6.0-micronaut-2.0,...
CVE-2026-42451
Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting XSS vulnerability in Grimmory's browser-based EPUB reader allows an attacker to embed arbitrary JavaScript in a crafted EPUB file. When a victim opens the book, the script executes in their browser wi...
CVE-2026-8429
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability to achieve code execution that bypasses the SPIP security screen protections...
CVE-2026-34682
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-34660
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially...
CVE-2026-8430
CVE-2026-8430 affects SPIP versions prior to 4.4.14. The vulnerability is a remote code execution in the public space, limited to certain nginx configurations, allowing attackers to run arbitrary code in the web server context. Exploitation relies on specific nginx configuration scenarios and is ...
CVE-2026-8429
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability to achieve code execution that bypasses the SPIP security screen protections...
CVE-2026-8429
SPIP versions prior to 4.4.14 are affected by a remote code execution vulnerability in the private space, allowing an attacker to execute arbitrary code in the web server context. Affected component: SPIP core (private space); impact is high on confidentiality, integrity, and availability as desc...
Extending Security to MCP Servers: Closing a Critical Gap
The Model Context Protocol MCP is a de facto standard for providing structured access to privileged systems for AI agents and external integrations. It acts as a USB-C port for AI, enabling faster innovation by allowing organizations to expose tools, resources, and workflows without the...
