209802 matches found
EUVD-2026-67769
An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37751
The 23blocks-OS ai-maestro version v0.24.17 is affected by an OS command injection vulnerability within the killSessionSync function located in lib/agent-runtime.ts . This flaw allows an attacker to execute arbitrary commands by providing a crafted input . While the vulnerability is confirmed, th...
PT-2026-83265
Name of the Vulnerable Software and Affected Versions Microsoft Edge for iOS affected versions not specified Description Improper neutralization of input used for Large Language Model LLM prompting allows an unauthorized attacker to perform spoofing over a network. LLM prompting refers to the...
PT-2026-82896
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ims-pcu driver where sysfs attributes are incorrectly exposed on all interfaces bound to the driver, including the secondary data interface. This occurs because th...
Linux Distros Unpatched Vulnerability : CVE-2026-81525
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct...
MiracleLinux 9 : python-pyasn1-0.4.8-7.el9_8.1 (AXSA:2026-1688:05)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1688:05 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ibus (UTSA-2026-031617)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031617 advisory. A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: velocity (UTSA-2024-005626)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005626 advisory. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account runnin...
Linux Distros Unpatched Vulnerability : CVE-2026-81523
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted witho...
PT-2026-83130
An issue in the with argv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82866
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' above fold images parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output...
PT-2026-82859
The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2026-82858
The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...
CVE-2026-37736: Allocation of Resources Without Limits or Throttling
An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37736
An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38636
The relibc library, specifically in commit 61f42d , contains a vulnerability in the seekdir() function located at /dirent/mod.rs. An attacker can exploit this issue by providing a crafted input to trigger a Denial of Service (DoS) . While the specific technical mechanism of the resource consumpti...
PT-2026-83129
An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38636
An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-83141
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...