171503 matches found
ROOT-APP-NPM-CVE-2026-54287 CVE-2026-54287 in hono - Patched by Root
Root has patched CVE-2026-54287 in the hono package for Root:npm. Multiple fixed versions available...
Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass
Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, through 11.10 allows remote attackers to obtain PII, add an administrative account, and change the configuration because of an authentication bypass, as exploited in the wild in July 2023. A patch is available. id: CVE-2023-35078 info...
Fortra GoAnywhere MFT - Remote Code Execution
Fortra GoAnywhere MFT is susceptible to remote code execution via unsafe deserialization of an arbitrary attacker-controlled object. This stems from a pre-authentication command injection vulnerability in the License Response Servlet. id: CVE-2023-0669 info: name: Fortra GoAnywhere MFT - Remote...
CVE-2026-51772
A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance . When the show_multiple_locations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a ...
CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
EUVD-2026-87085
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
CVE-2026-51772: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-88372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files. CVE-2026-88372 Note that Nessus relies ...
Linux Distros Unpatched Vulnerability : CVE-2026-98075
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is...
Linux Distros Unpatched Vulnerability : CVE-2026-97764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the...
Linux Distros Unpatched Vulnerability : CVE-2026-97579
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts /...
Linux Distros Unpatched Vulnerability : CVE-2026-98017
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind a populated shared ingress block during -init, publishing an...
CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
ROOT-APP-MAVEN-CVE-2024-30172 CVE-2024-30172 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2024-30172 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-12802 CVE-2026-12802 in org.bouncycastle:bcpkix-jdk18on - Patched by Root
Root has patched CVE-2026-12802 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-59639 CVE-2026-59639 in org.bouncycastle:bcpkix-jdk18on - Patched by Root
Root has patched CVE-2026-59639 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...