137319 matches found
AlmaLinux 10 : .NET 8.0 (ALSA-2026:41893)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:41893 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...
SUSE SLED15 / SLES15 Security Update : liboqs, oqs-provider (SUSE-SU-2026:3420-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3420-1 advisory. - disable KEMHQC and SIGMQOM and KEMNTRUPRIME on s390x for now, testsuite shows them not working. Updated to...
PT-2026-67204
CVE-2026-51264 - Rejected reason: DO NOT USE THIS CVE RECORD. Consu CVE ID :CVE-2026-51264 Published : July 31, 2026, 3:16 p.m. | 39 minutes ago Description :Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed...
PT-2026-67206
CVE-2026-51276 - Rejected reason: DO NOT USE THIS CVE RECORD. Consu CVE ID :CVE-2026-51276 Published : July 31, 2026, 3:16 p.m. | 39 minutes ago Description :Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed...
PT-2026-67200
CVE-2026-51256 - Rejected reason: DO NOT USE THIS CVE RECORD. Consu CVE ID :CVE-2026-51256 Published : July 31, 2026, 3:16 p.m. | 39 minutes ago Description :Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed...
📄 Snipe-IT 8.4.0 Authorization Bypass
A proof of concept exploit for Snipe-IT versions 8.4.0 and earlier that contain an authorization bypass vulnerability. The exploit abuses insufficient permission checks on the file upload API to allow a view-only user to upload arbitrary files to accessible objects. On deployments that permit...
PT-2026-67201
CVE-2026-51257 - Rejected reason: DO NOT USE THIS CVE RECORD. Consu CVE ID :CVE-2026-51257 Published : July 31, 2026, 3:16 p.m. | 39 minutes ago Description :Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed...
📄 Trilium Notes 0.102.1 Remote Code Execution
A proof of concept exploit for Trilium Notes TriliumNext versions 0.102.1 and earlier that contain a remote code execution vulnerability. The exploit imports a crafted Trilium export archive that bypasses the application's safe import protections through a path traversal and stored cross site...
📄 DbGate 7.1.8 Remote Code Execution
A proof of concept exploit for a DbGate 7.1.8 unauthenticated remote code execution vulnerability. The exploit abuses the /runners/start endpoint by injecting JavaScript through the JSON script runner's functionName field, allowing arbitrary operating system commands to be executed and their outp...
PT-2026-67218
CVE-2026-51289 - Rejected reason: DO NOT USE THIS CVE RECORD. Consu CVE ID :CVE-2026-51289 Published : July 31, 2026, 3:16 p.m. | 39 minutes ago Description :Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed...
PT-2026-67208
CVE-2026-51278 - Rejected reason: DO NOT USE THIS CVE RECORD. Consu CVE ID :CVE-2026-51278 Published : July 31, 2026, 3:16 p.m. | 39 minutes ago Description :Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed...
PT-2026-67220
CVE-2026-51301 - Rejected reason: DO NOT USE THIS CVE RECORD. Consu CVE ID :CVE-2026-51301 Published : July 31, 2026, 3:17 p.m. | 38 minutes ago Description :Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed...
The vulnerability of the Portainer container management platform, related to the improper implementation of authentication algorithms, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library allows a hacker to bypass existing security mechanisms.
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library is related to the use of the outdated cryptographic algorithm SHA-1. Exploiting this vulnerability allows a remote attacker to bypass existing security measures...
SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2026:3426-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3426-1 advisory. Upgrade to release 9.20.26. Security issues fixed: - CVE-2026-10723: incorrect acceptance of NSEC3 records...
RHEL 8 : libsolv (RHSA-2026:48815)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48815 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...
RHEL 9 : libsolv (RHSA-2026:48813)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48813 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...
RHEL 8 : libsolv (RHSA-2026:48817)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:48817 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer...
RHEL 10 : libsolv (RHSA-2026:48818)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48818 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv:...
PT-2026-66775
The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissions required was...