5674 matches found
CVE-2026-71408
CVE-2026-71408 affects Fortinet FortiOS across multiple lines: FortiOS 7.6.0–7.6.6, FortiOS 7.4 (all versions), and FortiOS 7.2 (all versions) with a resource allocation vulnerability leading to denial of service. The root cause is unbounded resource allocation, enabling network-based exploitatio...
Security update for gd (important)
openSUSE security update: security update for gd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21548-1 Rating: important References: bsc1273101 Cross-References: CVE-2026-9672 CVSS scores: CVE-2026-9672 SUSE : 6.5...
Oracle Linux 10 : osbuild-composer (ELSA-2026-49526)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-49526 advisory. 176-1.0.1 - Track github upstream Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
Linux Distros Unpatched Vulnerability : CVE-2026-62901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-62901 Note that Nessus relies on the presenc...
Linux Distros Unpatched Vulnerability : CVE-2026-62900
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56943
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 Build 9510.1044 and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes...
EUVD-2026-56895
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to ...
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.HttpListener. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Inconsistent interpretation of http...
Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-92f5-vc22-8j33. This link is maintained to preserve external references. Original Description Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
GHSA-2Q33-CF8W-7Q23 Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-92f5-vc22-8j33. This link is maintained to preserve external references. Original Description Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
GHSA-C494-M2FQ-59MX Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...
CVE-2026-70336
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-70340
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
CVE-2026-70327
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-70326
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-70328
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-70321
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...