Lucene search
K

1823 matches found

Github Security Blog
Github Security Blog
added 2026/07/06 9:9 p.m.6 views

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

Summary The devcontainer recreate endpoint relied on route middleware that checked only ActionRead on the workspace and, unlike the sibling delete endpoint, performed no ActionUpdate check before triggering the destructive rebuild. Note: Exploitation requires an existing low-privilege role with...

5.4CVSS6AI score0.00394EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.57 views

KB5094127: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (June 2026)

The remote Windows host is missing security update 5094127. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2026-42909, CVE-2026-42985, CVE-2026-42992, CVE-2026-42993,...

9.8CVSS7.5AI score0.48438EPSS
Exploits6References96
OpenVAS
OpenVAS
added 2026/04/16 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2026:1322-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.8AI score0.0035EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2026/04/16 12:0 a.m.43 views

SUSE: Security Advisory (SUSE-SU-2026:1324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.00414EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2026/04/16 12:0 a.m.18 views

Fedora: Security Advisory (FEDORA-2026-02c1f66b6a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS5.8AI score0.01688EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2026/04/15 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2026:1292-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00621EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2026/04/15 12:0 a.m.8 views

SUSE: Security Advisory (SUSE-SU-2026:1296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00621EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2026/04/15 12:0 a.m.7 views

SUSE: Security Advisory (SUSE-SU-2026:1273-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.8AI score0.0035EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2026/04/15 12:0 a.m.8 views

openSUSE Security Advisory (SUSE-SU-2026:1296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00621EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.8 views

KB5082052: Windows 11 version 23H2 Security Update (April 2026)

The remote Windows host is missing security update 5082052. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

9.8CVSS7.4AI score0.64095EPSS
Exploits13References115
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.6 views

openSUSE Security Advisory (SUSE-SU-2026:1252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.8AI score0.00247EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.7 views

SUSE: Security Advisory (SUSE-SU-2026:20985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.00216EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.5 views

SUSE: Security Advisory (SUSE-SU-2026:20993-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.8AI score0.00604EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.5 views

Debian: Security Advisory (DSA-6206-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.01069EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2026:20997-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS6.7AI score0.00519EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2026:20992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS6.1AI score0.00367EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.6 views

Fedora: Security Advisory (FEDORA-2026-65a08d1312)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS7.1AI score0.00422EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.7 views

Fedora: Security Advisory (FEDORA-2026-1774635f74)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.00131EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.8 views

Fedora: Security Advisory (FEDORA-2026-9c582575e5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00504EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.9 views

Fedora: Security Advisory (FEDORA-2026-a157bd84c4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00673EPSS
Exploits0References3
Rows per page
Query Builder