CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: mariadb-operator, nvidia-container-toolkit, vertical-pod-autoscaler, nri-prometheus, dex, terraform-provider-sendgrid, aws-sigv4-proxy, sqlexporter, terraform-provider-azapi, crossplane-provider-aws-route53, cloudprober, azcopy, gitlab-pages,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kubernetes, mariadb-operator, nvidia-container-toolkit, argocd-image-updater, x509-certificate-exporter, oauth2-proxy, crossplane-provider-aws-rds, dex, gitlab-kas, terraform-provider-sendgrid, cass-operator, tflint, verticadb-operator, volume-modifier-for-k8s,...

Microsoft .NET 安全漏洞

Microsoft .NET is a software framework developed by Microsoft Corporation in the United States. It focuses on agile software development, rapid application development, platform independence, and network transparency. There are security vulnerabilities in Microsoft .NET. Attackers can exploit the...

CVE-2026-26131

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-26127

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network...

UBUNTU-CVE-2026-26130

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : YARA vulnerabilities (USN-8080-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8080-1 advisory. Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules...

USN-8080-1 yara vulnerabilities

Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules or files. A remote attacker could possibly use these issues to cause YARA to crash, resulting in a denial of service. These issues only affected Ubuntu 16.04 LTS...

CVE-2026-2752

Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error messages expose internal class names, method calls, and...

CVE-2026-2752

Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error messages expose internal class names, method calls, and...

Photon OS 5.0: Dotnet PHSA-2026-5.0-0778

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0778. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: nova, vertical-pod-autoscaler, crossplane-provider-aws-rds, pluto, dex, crossplane-provider-aws-route53, kyverno-policy-reporter, crossplane-provider-aws-lambda, tekton-pipelines, gitlab-pages, splunk-otel-collector, k3s, crossplane-provider-aws-s3,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: nova, vertical-pod-autoscaler, crossplane-provider-aws-rds, pluto, dex, crossplane-provider-aws-route53, kyverno-policy-reporter, crossplane-provider-aws-lambda, tekton-pipelines, gitlab-pages, splunk-otel-collector, k3s, crossplane-provider-aws-s3,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: descheduler-fips, grafana-mimir-fips, terraform-provider-acme, external-dns, gitlab-pages, tigera-operator, vertical-pod-autoscaler, apache-beam-python-3.12-sdk, pluto-fips, terraform-provider-aws, telegraf, crossplane-provider-aws-sqs, terraform-provider-grafana-fip...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: descheduler-fips, grafana-mimir-fips, terraform-provider-acme, external-dns, gitlab-pages, tigera-operator, vertical-pod-autoscaler, apache-beam-python-3.12-sdk, pluto-fips, terraform-provider-aws, telegraf, crossplane-provider-aws-sqs, terraform-provider-grafana-fip...

Important Photon OS Security Update - PHSA-2026-5.0-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

CVE-2026-27710

CVE-2026-27710 affects NanaZip prior to fixed versions 6.0.1638.0 and 6.5.1638.0, where the ".NET Single File Application" parser is vulnerable to a denial-of-service due to an integer underflow in header-size calculation, which can trigger an unbounded memory allocation when opening a crafted bu...

CVE-2026-26222

Altec DocLink now maintained by Beyond Limits Inc. version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling,...

CVE-2026-26222 DocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE

Altec DocLink now maintained by Beyond Limits Inc. version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling,...

PT-2026-21780

Name of the Vulnerable Software and Affected Versions Altec DocLink version 4.0.336.0 Description The software has insecure .NET Remoting endpoints exposed over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and...