278306 matches found
PT-2026-94794
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subprograms where a Control Flow Integrity CFI mismatch occurs during task work callbacks. While BPF subprograms utilize the bpf callback t ABI, task work...
PT-2026-94284
Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...
CVE-2026-50609: Improper Access Control
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...
CVE-2026-66676: Missing Authorization
Unauthenticated Broken Access Control in Easy Invoice = 2.3.8 versions...
ROS-20260917-73-0003
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260917-73-0017
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-83944: Improper Access Control
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-54594: Improper Control of Interaction Frequency
OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation, .github/workflows/disc.yml runs for the issues opened event and the issues edited event and invokes the createDiscussion mutation whenever an issue is classified as off-topic, without recording th...
PT-2026-94142
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs in the device control handler when multiple threads issue concurrent IOCTL Input/Output Control requests. This issue is caused by improp...
ROS-20260917-73-0037
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-92935: Improper Control of Dynamically-Managed Code Resources
vm2 is a sandbox for running untrusted Node.js code. In versions = 3.11.4 and = 3.11.6, the NodeVM constructor computes hasRealRequireConfig with typeof requireOpts === 'object' && requireOpts !== null, so an array-shaped require value for example require: satisfies the guard that is meant to...
Oracle Linux 9 : libsoup (ELSA-2026-68234)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68234 advisory. - Fix CVE-2026-15711: Reject oversized WebSocket control frames Tenable has extracted the preceding description block directly from the Oracle Linux...
ROS-20260917-73-0011
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260917-73-0034
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-88795: Improper Control of Generation of Code
The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...
RockyLinux 8 : libsoup (RLSA-2026:68266)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:68266 advisory. libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation CVE-2026-15711 Tenable has extracted...
AlmaLinux 9 : libsoup (ALSA-2026:68234)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:68234 advisory. SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service CVE-2026-15709 libsoup:...
RockyLinux 9 : libsoup (RLSA-2026:68234)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:68234 advisory. SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service CVE-2026-15709 libsoup:...
AlmaLinux 8 : libsoup (ALSA-2026:68266)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:68266 advisory. libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation CVE-2026-15711 Tenable has extracted...