833 matches found
CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
Seraphim
Seraphim Agentic AI security scanner that proves exploitabili...
PT-2026-90524
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A log-processing component reintroduced a vulnerable version of a bundled HTTP client library after a previous update that had fixed known issues was reverted. T...
firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...
CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...
VEX-Bench: Benchmarking LLM Agents for Assessing Exploitability of Software Supply Chain Vulnerabilities
The software supply chain has become an increasingly exposed attack surface because of its reliance on intricate yet fragile dependencies. Existing defenses such as GitHub Dependabot often raise many false alerts because their coarse-grained matching cannot determine whether a vulnerable dependen...
sbom-sentinel
sbom-sentinel !CIhttps://github.com/MUGHEESM/sbom-sentine...
vulnseeker
🔍 VulnSeeker Smart CVE search with exploitability context a...
vex8s v0.5.0
Vex8s this logo is not AI generated Vex8s generates VEX documents by correlating container vulnerabilities with Kubernetes settings to determine which CVEs are actually exploitable in your cluster. Please note, this is an experimental project. Things might change quickly. How It Works The project...
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles
You can’t patch everything. So what do you fix first? Findings in Q2 2026 have changed traditional answers. The latest Quarterly Threat Landscape Report from Rapid7 Labs shows vulnerability disclosures still surging while attackers use automation and AI-assisted tooling to compress the time betwe...
Linux Distros Unpatched Vulnerability : CVE-2026-72264
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: tridentfb: fix potential memory leak in tridentpciprobe In tridentpciprobe, the memory allocated for modelist using fbvideomodetomodelist is not freed in...
CVE-2026-19893
The CVE-2026-19893 entry affects D-Link DIR-842 (firmware 2.01.B04) via the vsftpd component, specifically manipulating the /etc/vsftpd.conf file to cause incorrect default permissions. The vulnerability is exploitable remotely with high attack complexity and low exploitability assessment, though...
PT-2026-73041
Name of the Vulnerable Software and Affected Versions LB-LINK X-PRO version 1.0.22-20231206 Description A security flaw exists in the /etc/config/easycwmp file that allows for the use of hard-coded credentials. This issue can be exploited remotely, although the attack is considered highly complex...
PT-2026-72886
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-WLC100 version 2.05b02 Description An issue exists in the IKE Phase 1 Aggressive Mode component within the /etc/racoon.conf file. Manipulation of the exchange mode argument leads to a failure in encrypting sensitive data. This fla...
Linux Distros Unpatched Vulnerability : CVE-2026-53802
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlin...
PT-2026-71831
A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...
Linux Distros Unpatched Vulnerability : CVE-2026-53794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity check...
Linux Distros Unpatched Vulnerability : CVE-2026-69184
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer ho...
Photon OS 5.0: Aws PHSA-2026-5.0-91-0732
An update of the aws package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0732. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-18605
A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter Driver. Performing a manipulation results in uncontrolled search path. The attack requires a local approach. The complexity of a...