168337 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-69186
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - c-ares - None Ubuntu Linux - GHSA-jv8r-gqr9-68wj: Memory-amplification denial of service via unvalidated DNS header record counts CVE-2026-69186...
Photon OS 5.0: Erlang PHSA-2025-5.0-91-0505
An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0505. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Alsa PHSA-2026-5.0-92-0755
An update of the alsa package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0755. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2026-68207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeede...
Linux Distros Unpatched Vulnerability : CVE-2026-61550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an incorrect memory validation boundary mismatch inside remote communication API endpoints. CVE-2026-61550 Note that Nessus reli...
Photon OS 5.0: Mysql PHSA-2026-5.0-92-0940
An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0940. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Vim PHSA-2026-5.0-91-0908
An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0908. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2026-6791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home...
CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14
CVE-2026-6879 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...
CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14
CVE-2026-0864 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...
CVE-2026-19352 mifi lossless-cut Built-in HTTP API Service httpServer.ts server-side request forgery
A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...
CVE-2026-19352 mifi lossless-cut Built-in HTTP API Service httpServer.ts server-side request forgery
A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...
Nightmare-Windows-0-day-exp
Windows Zero-Day Exploit Collection !Research Use Onlyhtt...
CVE-2026-19350
A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...
EUVD-2026-54918
A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...
CVE-2026-19350
Dolibarr ERP TakePOS module vulnerability CVE-2026-19350 affects the function fail in htdocs/takepos/invoice.php. The issue enables manipulation that leads to missing authorization, with remote exploitation potential. A patch identified as 8992ce8704da947b6abe7b65a6fe59aed736bb81 is available; ap...
CVE-2026-19350 Dolibarr ERP TakePOS invoice.php fail authorization
A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...
ROOT-APP-NPM-CVE-2026-53663 CVE-2026-53663 in react-router - Patched by Root
Root has patched CVE-2026-53663 in the react-router package for Root:npm. Multiple fixed versions available...
CVE-2026-19337
A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component readwebpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This...
CVE-2026-19337
CVE-2026-19337 affects the package adenot mcp-google-search up to version 0.3.1. The vulnerability is in an unknown function within src/index.ts of the component read_webpage , enabling server-side request forgery (SSRF) through manipulation of the url argument. The attack is described as restric...