4368 matches found
CVE-2026-2752
Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error messages expose internal class names, method calls, and...
Photon OS 5.0: Dotnet PHSA-2026-5.0-0778
An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0778. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
GHSA-8FJ7-8H3W-XWFM vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, datadog-agent, apko, crossplane-provider-aws-ec2, azure-service-operator, dex, pulumi-language-java, bento, gitlab-runner, crossplane-provider-aws-dynamodb, descheduler, cloud-sql-proxy, opa, crossplane-provider-aws-sqs, src, chezmoi,...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, datadog-agent, apko, crossplane-provider-aws-ec2, azure-service-operator, dex, pulumi-language-java, bento, gitlab-runner, crossplane-provider-aws-dynamodb, descheduler, cloud-sql-proxy, opa, crossplane-provider-aws-sqs, src, chezmoi,...
GHSA-8FJ7-8H3W-XWFM vulnerabilities
Vulnerabilities for packages: rancher-support-bundle-kit, apache-beam-python-3.11-sdk, grafana-alloy-fips, vertical-pod-autoscaler-fips, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, opentelemetry-collector, gotenberg, crossplane-provider-aws-ecr,...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: rancher-support-bundle-kit, apache-beam-python-3.11-sdk, grafana-alloy-fips, vertical-pod-autoscaler-fips, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, opentelemetry-collector, gotenberg, crossplane-provider-aws-ecr,...
Important Photon OS Security Update - PHSA-2026-5.0-90-0778
Updates of 'dotnet-runtime' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-0778
Updates of 'dotnet-runtime' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-91-0778
Updates of 'dotnet-runtime' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-92-0778
Updates of 'dotnet-runtime' packages of Photon OS have been released...
CVE-2026-27710
CVE-2026-27710 affects NanaZip prior to fixed versions 6.0.1638.0 and 6.5.1638.0, where the ".NET Single File Application" parser is vulnerable to a denial-of-service due to an integer underflow in header-size calculation, which can trigger an unbounded memory allocation when opening a crafted bu...
CVE-2026-26222
Altec DocLink now maintained by Beyond Limits Inc. version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling,...
CVE-2026-26222 DocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE
Altec DocLink now maintained by Beyond Limits Inc. version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling,...
PT-2026-21780
Name of the Vulnerable Software and Affected Versions Altec DocLink version 4.0.336.0 Description The software has insecure .NET Remoting endpoints exposed over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and...
CVE-2026-21665
The Print Service component of Fiserv Originate Loans Peripherals formerly Velocity Services in unsupported version 2021.2.4 build 4.7.3155.0011 uses deprecated .NET Remoting TCP channels that allow unsafe deserialization of untrusted data. When these services are exposed to an untrusted network ...
CVE-2026-21665
The CVE concerns the Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in the unsupported 2021.2.4 release (build 4.7.3155.0011). It uses deprecated .NET Remoting TCP channels that enable unsafe deserialization of untrusted data. When exposed to an untrust...
GHSA-QVHC-9V3J-5RFW vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21218 vulnerabilities
Vulnerabilities for packages: dotnet...