232312 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-19720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - inetutils - None Ubuntu Linux - talkd buffer overflow with long DNS names CVE-2026-19720 Note that Nessus relies on the presence of the package a...
PT-2026-72305
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CAN BCM module where stale receive RX and transmit TX operations persist after device removal. For RX operations, an RX SETUP update for an existing operation coul...
Linux Distros Unpatched Vulnerability : CVE-2026-72130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches...
PT-2026-73041
Name of the Vulnerable Software and Affected Versions LB-LINK X-PRO version 1.0.22-20231206 Description A security flaw exists in the /etc/config/easycwmp file that allows for the use of hard-coded credentials. This issue can be exploited remotely, although the attack is considered highly complex...
Linux Distros Unpatched Vulnerability : CVE-2026-74501
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface...
Linux Distros Unpatched Vulnerability : CVE-2026-72373
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified...
MINI-9M2R-Q29G-RGH7
Bulletin has no description...
MINI-39Q4-GM5H-2537
Bulletin has no description...
CVE-2026-63649
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks...
MINI-M652-9V3R-4W85
Bulletin has no description...
GHSA-4VR5-P2GC-H23P vulnerabilities
Vulnerabilities for packages: telegraf...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
No d...
MINI-3MR5-2W5F-GGWX
Bulletin has no description...
EUVD-2026-58802
PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...
MINI-9JF7-H8XF-VJJQ
Bulletin has no description...
CVE-2026-73679
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-19847
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...
CVE-2026-19846
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...
CVE-2026-19682
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...
