Linux Distros Unpatched Vulnerability : CVE-2026-60315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-13064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentiall...

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An...

PT-2026-65113

A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response...

VulnCheck KEV: CVE-2025-68686

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability CWE-200 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypas...

PT-2026-64853

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other...

CVE-2021-32084

The CVE-2021-32084 entry describes a vulnerability in Quest KACE Systems Deployment Appliance (SMA) 11.0.273 where API endpoints remain accessible when web console access is restricted by IP/subnet, allowing an attacker who has credentials or API keys to access the API and potentially compromise ...

Xerox Printers Missing Authentication for Critical Function (CVE-2024-12511)

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-68742)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505879; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

PT-2026-65108

Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...

CVE-2026-57989

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

DEBIAN-CVE-2026-15578

Bulletin has no description...

CVE-2026-57990

Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

EUVD-2026-49059

Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-57989

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2016-7270

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:14+00:00| seen| https://t.me/KaitNews/1590 2026-07-27 00:01:52+00:00| seen| https://t.me/KaitNews/1590 2026-08-05 21:00:04+00:00| seen| https://t.me/KaitNews/1590 2026-08-06 00:00:10+00:00| seen| https://t.me/KaitNews/1590...

CVE-2017-5060

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:05+00:00| seen| https://t.me/KaitNews/4131 2026-07-27 00:01:46+00:00| seen| https://t.me/KaitNews/4131 2026-08-04 12:00:08+00:00| seen| https://t.me/KaitNews/4131 2026-08-05 00:00:44+00:00| seen| https://t.me/KaitNews/4131...

CVE-2017-0752

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:02+00:00| seen| https://t.me/KaitNews/5271 2026-07-27 00:01:42+00:00| seen| https://t.me/KaitNews/5271 2026-08-04 09:00:05+00:00| seen| https://t.me/KaitNews/5271 2026-08-05 00:00:49+00:00| seen| https://t.me/KaitNews/5271...

CVE-2017-13151

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:53+00:00| seen| https://t.me/KaitNews/6958 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6958 2026-07-29 05:00:05+00:00| seen| https://t.me/KaitNews/6958 2026-07-30 00:03:15+00:00| seen| https://t.me/KaitNews/6958...

Information Exposure

dompdf/dompdf is vulnerable to Information Exposure. The vulnerability is due to insufficient validation of data-URI embedded SVG elements, which allows an attacker to reference local files through the href or xlink:href attributes and exploit differences in file processing behavior to leak...