87168 matches found
PT-2026-57366
Name of the Vulnerable Software and Affected Versions Authorizer versions prior to 2.0.1 Description The /authorize endpoint fails to validate the redirect uri parameter against a list of allowed origins. When the response type is set to token or id token, the server appends the access token, id...
libcurl 8.11.1 < 8.21.0 Netrc Wrong User Password Leak (CVE-2026-8926)
The version of libcurl installed on the remote host is 8.11.1 prior to 8.21.0. It is, therefore, affected by a credential leak vulnerability: - When asking curl to use a .netrc file to find credentials and at the same time specifying a URL with a username without a password, curl could wrongly ge...
PT-2026-57120
The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gwaiwebu gravitywrite disconnect handler function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with...
PT-2026-57252
ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validation in internal/idp/providers/jwt/session.go skips the maximum token age freshness check when an incoming token omits the iat claim, allowing arbitrarily old tokens...
AlmaLinux 8 : tomcat (ALSA-2026:37137)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37137 advisory. Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor CVE-2026-29146 Apache Tomcat: Apache Tomcat:...
RockyLinux 9 : tomcat (RLSA-2026:36879)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36879 advisory. Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor CVE-2026-29146 Apache Tomcat: Apache Tomcat:...
Langflow < 1.9.0 Missing Authorization (CVE-2026-33760)
The version of Langflow installed on the remote host is prior to 1.9.0. It is, therefore, affected by a missing authorization vulnerability: - The /api/v1/monitor router exposes 7 endpoints that perform read, write, and delete operations on user-owned resources without verifying that the...
SUSE SLED15 / SLES15 Security Update : rustup (SUSE-SU-2026:2832-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2832-1 advisory. This update for rustup fixes the following issues Security issues: - CVE-2024-12224: idna: idna accepts Punyco...
MINI-XQ48-22JW-3XRM
Bulletin has no description...
MINI-V8W8-CCMH-7CX9
Bulletin has no description...
MINI-F3H7-42R4-39HG
Bulletin has no description...
MINI-6VM5-HVM7-6CPF
Bulletin has no description...
MINI-FVWW-5X32-8532
Bulletin has no description...
MINI-RC9R-25FQ-QPHH
Bulletin has no description...
MINI-C65Q-G46R-MRCM
Bulletin has no description...
MINI-Q5RQ-53X2-QH2M
Bulletin has no description...
MINI-XR42-2Q5M-96H4
Bulletin has no description...
MINI-5MWX-C2XW-RHW4
Bulletin has no description...