PT-2026-71928

A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...

Linux Distros Unpatched Vulnerability : CVE-2026-53790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious...

PT-2026-71674

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view department.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

PT-2026-71893

A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore url of the file src/mcp-rdf-explorer/server.py of the component MCP Server. Performing a manipulation of the argument url results in server-side request forgery. The attack may be...

PT-2026-71747

A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities configurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The explo...

PT-2026-71748

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

Linux Distros Unpatched Vulnerability : CVE-2026-70453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hashsearch function that allows a remote attacker to cause a denial of service by...

PT-2026-71927

Name of the Vulnerable Software and Affected Versions Dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the Code Generator component within the DefGenProjectController.java file. A remote attacker can exploit this by manipulating the outputDir, parent, or...

ROS-20260813-73-0049

The vulnerability in libucl is related to the execution of an operation outside the buffer in memory. This vulnerability can be exploited remotely...

ROS-20260813-73-0033

The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-53797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent...

PT-2026-71929

A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-53798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferre...

MiracleLinux 8 : python-idna-2.5-8.el8_10 (AXSA:2026-1519:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1519:01 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-53788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol...

CVE-2026-64303 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64303 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64294 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64294 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63796 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-63796 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63806 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-63806 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...