115246 matches found
CVE-2026-104962: Missing Authorization
Plane is an open-source project management tool. Prior to 1.4.0, GET /api/v1/workspaces/slug/projects/projectid/members/ returns the complete project-member roster, including each member's email address, first and last name, display name, avatar, and role. ProjectMemberPermission gates the...
CVE-2026-104968: Missing Authorization
Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/slug/entity-search/?querytype=usermention returns workspace-member display names, UUIDs, and avatar URLs to any authenticated user who knows the workspace slug, even when the caller is not a workspace member. The...
CVE-2026-105179: Missing Encryption of Sensitive Data
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...
PT-2026-104808
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...
PT-2026-106170
Name of the Vulnerable Software and Affected Versions Kirillbdev WC Ukraine Shipping versions prior to 1.23.2 Description Kirillbdev WC Ukraine Shipping contains a missing authorization flaw that allows the exploitation of incorrectly configured access control security levels. Recommendations...
Fedora 44 : cri-o1.36 (2026-f5c88f763a)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f5c88f763a advisory. - Update to release v1.36.6 - Resolves: rhbz2537559 - Resolves CVE-2026-17113: rhbz2523493 - Resolves: rhbz2540885 Tenable has extracted the preceding...
PT-2026-104777
Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...
CVE-2026-105170: Missing Authentication for Critical Function
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...
CVE-2026-97304: Missing Authorization
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63...
CVE-2026-105306: Missing Authorization
A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration process fails to filter security-sensitive client attributes when a new client is created. An attacker with a valid Initial Access Token can...
Linux Distros Unpatched Vulnerability : CVE-2026-81841
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shar...
Fedora 45 : openssl (2026-06c29a2cb4)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-06c29a2cb4 advisory. Rebase to OpenSSL 4.0.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
CVE-2026-20527: Improper Validation of Array Index
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...
CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...
CVE-2026-105170
A vulnerability exists in the kishor-23 food-waste-management-system within the Admin Signup component. An unknown function in the file admin/signup.php allows for missing authentication due to the manipulation of the sign argument. This flaw can be exploited remotely , and a public exploit is av...
CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...
CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...
CVE-2026-95296
A missing authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/551296612...
CVE-2026-105210
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...
