Lucene search
+L

147351 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-26825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xlsparseWorkBook and is triggere...

5.3CVSS5.9AI score0.00214EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-10947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.2AI score0.00493EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-47319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before...

6.1CVSS5.9AI score0.00103EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-11219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTM...

4.3CVSS6.2AI score0.00154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-10925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially...

8.3CVSS6.2AI score0.00286EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-11157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject...

5.4CVSS6.2AI score0.00121EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.17 views

PT-2026-49599

Impact skillctl 0.1.0 and 0.1.1 contained four path-safety vulnerabilities that, in combination, allowed an attacker to: 1. Exfiltrate arbitrary files on the operator's machine by publishing a malicious skills library containing a symlink inside a skill folder e.g. niania →...

5.6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.20 views

PT-2026-47188

CVE-2026-38500 - Cisco IOS XE Software Privilege Escalation Vulnerability CVE ID :CVE-2026-38500 Published : June 5, 2026, 2:16 p.m. | 1 hour, 6 minutes ago Description :Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.24 views

PT-2026-48566

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-48 ImageMagick versions prior to 7.1.2-24 Description A missing check in the DCM decoder can result in an image with invalid dimensions, which may cause crashes during other operations. Recommendations Upda...

7.5CVSS5.2AI score0.0046EPSS
SaveExploits1References142
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-10995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to...

8.8CVSS6.3AI score0.00352EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-11203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.2AI score0.00229EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.19 views

RockyLinux 10 : image-builder (RLSA-2026:22937)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22937 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...

10CVSS6.9AI score0.01945EPSS
SaveExploits2References17
Oracle linux
Oracle linux
added 2026/06/05 12:00 a.m.18 views

ImageMagick security update

6.9.10.68-7.0.11 - Fix CVE-2026-32636 Orabug: 39375225 6.9.10.68-7.0.9 - Fix CVE-2026-28691 and CVE-2026-28693 Orabug: 39174244 6.9.10.68-7.0.7 - Fixes Local File Disclosure via Path Traversal CVE-2026-25965 Orabug: 39118995 - Fixes Memory allocation with excessive without limits in the internal...

7.5CVSS5.4AI score0.00967EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-11181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML...

6.3CVSS6.2AI score0.00148EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.16 views

JetBrains YouTrack < 2026.1.13570 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.1.13570. It is, therefore, affected by multiple vulnerabilities as referenced in the advisory. - In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles ...

6.5CVSS5.5AI score0.00258EPSS
SaveExploits0References3
Redos
Redos
added 2026/06/05 12:00 a.m.19 views

ROS-20260605-73-0003

The vulnerability in ImageMagick7 is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.1CVSS5.4AI score0.0012EPSS
SaveExploits0
OSV
OSV
added 2026/06/04 11:17 p.m.14 views

DEBIAN-CVE-2026-11232

Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

5.4CVSS5.5AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/04 11:17 p.m.9 views

DEBIAN-CVE-2026-11204

Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00201EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/04 11:17 p.m.14 views

CVE-2026-11156

Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00164EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/04 11:17 p.m.16 views

CVE-2026-11129

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00176EPSS
SaveExploits0References2
Rows per page
Query Builder