582 matches found
CVE-2016-20038
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the...
CVE-2026-4923
Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second wildcard to be somewhere other than the end of the path. Unsafe examples: /foo-bar-:baz /a-:b-c-:d...
Photon OS 4.0: Vim PHSA-2026-4.0-0979
An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0979. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid30340...
MINI-P3CJ-V26F-79XM
Bulletin has no description...
GHSA-9F94-5G5W-GF6R CRL Distribution Point Scope Check Logic Error in AWS-LC
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs wi...
CVE-2026-23264
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 "drm/amd: Refactor amdgpuaspm to be...
MINI-2GFH-WQRJ-PHQM
Bulletin has no description...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2026-006161)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006161 advisory. A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can lea...
GHSA-9R75-G2CR-3H76
creationtimestamp| type| source ---|---|--- 2026-03-06 20:10:06+00:00| seen| https://gist.github.com/alon710/6327cd7c8e0c4f035cf6ad7379bcfa32...
CVE-2026-20020
creationtimestamp| type| source ---|---|--- 2026-03-04 20:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb3rl6hnr27...
GHSA-25PW-4H6W-QWVM
creationtimestamp| type| source ---|---|--- 2026-03-04 11:10:06+00:00| seen| https://gist.github.com/alon710/3e78bbd825aa833ce30636ac23456c1d...
MINI-JMFR-GQX8-FVHC
Bulletin has no description...
MINI-2WRX-953C-2PJR
Bulletin has no description...
Malicious Package
Overview magala is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MINI-C986-RX4Q-JX9W
Bulletin has no description...
PT-2026-22463
The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...
phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint
Summary The WebAuthn prepare endpoint /api/webauthn/prepare creates new active user accounts without any authentication, CSRF protection, CAPTCHA, or configuration checks. This allows unauthenticated attackers to create unlimited user accounts even when registration is disabled. Details File:...
PT-2026-21925
Name of the Vulnerable Software and Affected Versions Linksys MR9600 version 1.0.4.205530 Linksys MX4200 version 1.0.13.210200 Description A lack of proper authentication allows a user with physical access to the device to misuse the mesh functionality. This can lead to gaining access to sensitiv...
