1683 matches found
Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. id: CVE-2026-34486 info: name: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote...
prowler
Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...
prowler
Prowler Prowler es un escáner de vulnerabilidades de red implementado en un clúster de Raspberry Pi, desarrollado por primera vez durante el hackathon de la comunidad de seguridad informática de Singapur - HackSmith v1.0. Capacidades Escanear una red una subred particular o una lista de direccion...
EyesOfNetwork - Hardcoded API Key
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...
Astra Linux – Vulnerability in Python 2.7, Pypy
In Python 3.x versions prior to 3.5.10, 3.6.x versions prior to 3.6.12, 3.7.x versions prior to 3.7.9, and 3.8.x versions prior to 3.8.5, CRLF injection is allowed if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: sit: Do not call ipip6devfree from sitinitnet. ipip6devfree is a member function of dev-privdestructor; it has already been called by registernetdevice in case of errors. An alternative approach would be to make ipip6devfree...
Fedora 45 : bluez (2026-9e011ac6ed)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9e011ac6ed advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2026-69493
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
EUVD-2026-73773
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
UBUNTU-CVE-2026-82064
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...
CVE-2026-72956
CVE-2026-72956 is an untrusted pointer dereference in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.5 (MEDIUM) with high confidentiality impact but no integri...
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87622
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-55402
CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service...
Photon OS 5.0: Samba PHSA-2026-5.0-92-0948
An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0948. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EUVD-2026-56467
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network...
Photon OS 5.0: Flannel PHSA-2023-5.0-91-0049
An update of the flannel package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
librest-1_0-0-0.10.2-2.1 on GA media (moderate)
librest-10-0-0.10.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11477-1 Rating: moderate Cross-References: CVE-2026-16615 CVSS scores: CVE-2026-16615 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...