322 matches found
Security Updates for Microsoft PowerPoint Products C2R (August 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...
CVE-2026-20712
Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
CVE-2026-20712
CVE-2026-20712 affects some Intel UEFI firmware on Intel reference platforms. The root cause is incomplete cleanup in UEFI, enabling information disclosure under local access by a privileged system software adversary with low attack complexity and no user interaction. The vulnerability’s impact i...
CVE-2026-68809
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
EUVD-2026-56461
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
PT-2026-70727
Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description Incomplete cleanup in the software allows an unauthorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment,...
Security Update for Microsoft PowerPoint Products (August 2026)
The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...
2026.3 IPU, Intel® UEFI Firmware Advisory
Summary: A potential security vulnerability for some Intel® UEFI Reference BIOS may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20712 Description: Incomplete cleanup in some UEFI firmware for so...
EUVD-2026-53818
A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager.setupsessionpersistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation results in incomplete cleanup. The attack may be performed fro...
Siemens SIMATIC S7-1500 CPU 1518 MFP Incomplete Cleanup (CVE-2026-43027)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505870; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
Siemens SIMATIC S7-1500 CPU 1518 MFP Incomplete Cleanup (CVE-2025-22090)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505874; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
Astra Linux – Vulnerability in Intel Microcode
Incomplete cleanup in specific special register read operations for some IntelR processors may allow an authenticated user to potentially enable information disclosure via local access...
NPM: Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
NPM: Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads vulnerability discovered by ? in WordPress Npm multer versions = 2.0.0-alpha.1, 2.2.0...
Incomplete Cleanup
Overview Affected versions of this package are vulnerable to Incomplete Cleanup in the diskStorage function. An attacker can exhaust disk space by repeatedly initiating and aborting multipart uploads, causing orphaned partial files to accumulate on disk. Remediation Upgrade multer to version 2.2....
Incomplete Cleanup
Overview Affected versions of this package are vulnerable to Incomplete Cleanup in the diskStorage function. An attacker can exhaust disk space by repeatedly initiating and aborting multipart uploads, causing orphaned partial files to accumulate on disk. Remediation A fix was pushed into the mast...
Astra Linux – Vulnerability in Tomcat9
There is an incomplete cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from version 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80, and from 8.5.0 through 8.5.93, an error may cause Tomcat to skip certain...
Astra Linux – Vulnerability in Tomcat9
DoS attack due to a vulnerability related to incomplete cleanup in Apache Tomcat. WebSocket clients were able to keep WebSocket connections open, leading to increased resource consumption. This issue affects Apache Tomcat versions from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18,...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an array entry processing error in the reflink cleanup mechanism of ocfs2, potentially leading to...
Incomplete Cleanup
Overview org.springframework:spring-web is a package that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Incomplete Cleanup via multipart request...
DEBIAN-CVE-2026-5795
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals. A subsequent reques...