CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

PT-2026-70617

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A stack-based buffer overflow allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A stack-based buffer overflow...

PT-2026-70905

Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...

PT-2026-70589

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description An integer overflow or wraparound occurs, allowing an unauthorized attacker to execute arbitrary code locally or remotely, which can affect the system. An integer overflow is a conditi...

PT-2026-70714

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70718

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70992

Name of the Vulnerable Software and Affected Versions Wazuh Manager affected versions not specified Description A deserialization of untrusted data issue exists in the Cluster DAPI Protocol, which allows a remote attacker to execute arbitrary code and perform arbitrary file read and write...

Fedora 44 : mingw-python-pip (2026-676dfc2776)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-676dfc2776 advisory. Update to pip-26.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Linux Distros Unpatched Vulnerability : CVE-2026-71218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message leng...

PT-2026-70605

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70712

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70097

Name of the Vulnerable Software and Affected Versions iperf3 affected versions not specified Description A flaw in the server's handling of control-channel JSON allows a remote attacker to cause a Denial of Service DoS. By sending crafted JSON containing oversized numeric parameters, specifically...

PT-2026-70923

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.137 Description A use after free issue in Blink allows a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Use after free is a memory corruption flaw...

PT-2026-70653

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70826

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse options function in nselib/packet.lua to allocate...

PT-2026-70735

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-70920

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.137 Description A use-after-free issue exists in the TabStrip component of Google Chrome on Mac. This occurs when a remote attacker, having already compromised the renderer process, uses a specially...

PT-2026-70657

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

PT-2026-70189

Name of the Vulnerable Software and Affected Versions SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 versions prior to V4.3.4.1 Description Devices running Industrial OS with Node-RED installed do not enforce authentication on the Node-RED HTTP interface. This allows unauthenticated access to...

CVE-2025-15683

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or reset the device, clear application data, or terminate the web server through a segmentation faul...