164484 matches found
CVE-2026-102899: Improper Authentication
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
CVE-2026-89077: Incorrect Implementation of Authentication Algorithm
Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
PT-2026-113947
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
CVE-2026-101987: Undefined Security Weakness
An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled...
PT-2026-116385
CVE ID :CVE-2026-106006 Published : Oct. 14, 2026, 10:26 p.m. | 20 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-114420
Name of the Vulnerable Software and Affected Versions curl versions prior to 8.23.0-1.1 Description An ftp:// transfer configured with CURLUSESSL NONE may reuse a pooled FTP control connection previously upgraded with STARTTLS and authenticated via a client certificate. Because the subsequent...
PT-2026-116386
CVE ID :CVE-2026-106068 Published : Oct. 14, 2026, 10:26 p.m. | 20 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-113771
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre social login in...
CVE-2026-110261: Inefficient Algorithmic Complexity
OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTEFRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames fix point algorithm converge slowly,...
CVE-2026-100169: Improper Authentication
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
FreeBSD-SA-26:70.tcp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:70.tcp Security Advisory The FreeBSD Project Topic: Remotely triggerable buffer overflow in tcprack Category: core Module: tcprack Announced: 2026-10-14...
FreeBSD-SA-26:72.bhyve
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:72.bhyve Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in bhyve device models Category: core Module: bhyve Announced: 2026-10-14...
Unity Linux 20.1070a Security Update: pam (UTSA-2026-130124)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130124 advisory. Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb...
SUSE SLES12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2026:4633-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4633-1 advisory. - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage...
Linux Distros Unpatched Vulnerability : CVE-2026-109117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - oath-toolkit - None Ubuntu Linux - Unknown description CVE-2026-109117 Note that Nessus relies on the presence of the package as reported by the...
Windows Services with Cached Credentials (LSA Secrets)
One or more Windows services on the remote host are configured to run as a domain or local user account rather than a built-in account LocalSystem, LocalService, or NetworkService. Windows automatically caches these account credentials in the LSA Secrets store HKLM\SECURITY\Policy\Secrets\SC,...
Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm (CVE-2026-21718)
An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system. This plugin only works with Tenable.ot. Please visit...
Juniper Junos OS Vulnerability (JSA112170)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA112170 advisory. - A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complet...
