616810 matches found
CVE-2026-87812: Improper Neutralization of Input During Web Page Generation
SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes without escaping. Attackers can inject malicious URLs with event handlers that execute JavaScript in the authenticated...
PT-2026-89711
These are all security issues fixed in the expat-2.8.4-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-81830
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via...
Linux Distros Unpatched Vulnerability : CVE-2026-87735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or...
The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.
The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
PT-2026-89044
🚨 CVE-2026-86775 knowns npm package versions = 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied document path with cleanDocPath, which strips leading/trailing slashes and the .md suffix but does not...
PT-2026-89714
These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-89708
These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 9 : ELSA-2026-64774-0: / python3.14-cryptography (ELSA-2026-647740)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647740 advisory. 45.0.4-6 - Fix gating plan 45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249 Tenable has extracted the preceding description block...
The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.
The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Oracle Linux 10 : ELSA-2026-64777-0: / buildah (ELSA-2026-647770)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647770 advisory. 1.43.1-6.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-6 - Rebuild for golang CVE fixes - Resolves:...
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-66357 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-66357 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...