315128 matches found
The vulnerability of the nvme_pr_read_keys() function in the drivers/nvme/host/pr.c kernel of the Linux operating system allows a hacker to disclose sensitive information or cause service failures.
The vulnerability of the nvmeprreadkeys function in the drivers/nvme/host/pr.c module of the Linux operating system is related to unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...
The vulnerability of the Apache Tomcat application server, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Unity Linux 20.1070e Security Update: rubygem-excon (UTSA-2026-099493)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099493 advisory. Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following...
PT-2026-73264
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-50776
Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...
CVE-2026-50776
A Directory Traversal vulnerability in Pronis Loisirs Bilttorie CSE (versions before April 2026) allows an unauthenticated remote attacker to read sensitive files and execute arbitrary code. CVSS 3.1 scores it 7.5 (HIGH) with network attack vector, low complexity, and high confidentiality impact....
CVE-2026-67918
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...
PT-2026-76800
Name of the Vulnerable Software and Affected Versions phpIPAM versions prior to 1.8.2 Description An issue exists where the software fails to verify if a requested IP address belongs to the subnet for which a temporary share token was issued. In the endpoints 'app/temp share/index.php' and...
PT-2026-76647
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...
PT-2026-76682
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description Users permitted to view group activity but restricted from seeing shared drafts can...
PT-2026-76664
Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description A Path Traversal issue exists where a low privileged attacker with local access could potentially exploit the flaw to perform information tampering. Path Traversal is a vulnerability that...
PT-2026-76663
Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description A path traversal issue exists where a low privileged attacker with local access could potentially exploit the flaw to cause information disclosure. Path traversal is a method where an...
PT-2026-73268
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-76856
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...
ALSA-2026:55857 Important: .NET 10.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
RockyLinux 9 : curl (RLSA-2026:55439)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55439 advisory. curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication CVE-2026-1965 curl: curl: Information disclosure via...
Unity Linux 20.1070e Security Update: util-linux (UTSA-2026-099510)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099510 advisory. A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw...
AlmaLinux 9 : .NET 8.0 (ALSA-2026:54574)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...
The vulnerability of the Apache Tomcat application server, related to the implementation of incorrect control flow management, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Tomcat application server is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...