Lucene search
+L

113192 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-106205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to...

8.1CVSS5.5AI score0.00291EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-106410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI...

4.2CVSS5.8AI score0.00168EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-106418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via...

6.5CVSS5.7AI score0.00219EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-106388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain...

5.3CVSS5.8AI score0.00225EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•6 views

CVE-2026-76268: Missing Authentication for Critical Function

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer REST Application Programming Interface API on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerabili...

9.8CVSS6AI score0.004EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•12 views

PT-2026-107462

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11...

5.3CVSS5.8AI score0.00246EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/07 12:00 a.m.•5 views

CVE-2026-106387

Missing authorization in Mobile in Google Chrome on on iOS prior to 15...

8.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/07 12:00 a.m.•5 views

CVE-2026-106388

Missing authorization in DataTransfer in Google Chrome prior to 155.0...

5.3CVSS5.8AI score0.00225EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/07 12:00 a.m.•9 views

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys...

5.4CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-106362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy vi...

6.5CVSS5.7AI score0.00289EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-106267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...

6.5CVSS5.7AI score0.00225EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•9 views

PT-2026-107563

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

8.8CVSS5.9AI score0.00394EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•10 views

PT-2026-107672

Name of the Vulnerable Software and Affected Versions Amazon Athena engine version 3 Description Missing authorization checks in request handling could have allowed an authenticated user to read limited query metadata from other AWS accounts. The exposed information includes AWS account identifie...

7.7CVSS5.8AI score0.00201EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•6 views

CVE-2026-107206: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

9.4CVSS5.9AI score0.00584EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/07 12:00 a.m.•6 views

CVE-2026-106196

Missing authorization in Navigation in Google Chrome on on iOS prior t...

7.6CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•11 views

PT-2026-107454

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...

4.3CVSS6AI score0.00259EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•5 views

CVE-2026-27434: Missing Authorization

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2...

5.3CVSS6AI score0.00176EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/10/06 11:35 p.m.•9 views

CVE-2026-106225

A missing authorization flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501805355...

8.8CVSS5.7AI score0.00305EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/10/06 11:28 p.m.•10 views

CVE-2026-106384

A missing authorization flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554348119...

6.5CVSS5.7AI score0.00237EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/10/06 11:28 p.m.•10 views

CVE-2026-106250

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502497790...

5.4CVSS5.7AI score0.0017EPSS
SaveExploits0References5
Rows per page
Query Builder