CVE-2026-95843: Improper Input Validation

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter through SharedSubscriptionUtils.extractShareName before validating the complete $share/shareName/topicFilter structure. A remote client can send a filter such as $share/grp withou...

PT-2026-97541

Name of the Vulnerable Software and Affected Versions automation-controller affected versions not specified Description A flaw in the API allows an unauthenticated remote attacker to access sensitive information via the health-check endpoint '/api/v2/ping/'. The system over-serializes RBAC-gated...

ROS-20260923-73-0015

The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

ROS-20260923-73-0007

The vulnerability of the net/netfilter/nfnatamanda.c and net/netfilter/nfnatsip.c modules in the Linux operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity,...

CVE-2026-96602: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-95676: Improper Authentication

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply...

Password component Code Execution

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

.NET Visual Studio Code Critical Data Deletion DoS

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Cisco Secure Email Resource Control DoS

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...

Ruby IMAP Library CRLF Injection

The vulnerability in the client API library for the IMAP protocol in Ruby is related to the failure to implement measures to neutralize CRLF sequences. Exploiting this vulnerability allows an attacker to execute arbitrary IMAP commands remotely...

Check Point Security Management Server Path Traversal

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in incorrect path name restrictions for accessing the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Device Trust Component Code Execution

The vulnerability of the Device Trust component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cisco Secure Firewall Security Bypass

The vulnerabilities of Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA, as well as the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software, are related to the compromise of the data protection...

Proxmox.inc.php XSS

The vulnerability of the proxmox.inc.php script in the LibreNMS network monitoring system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

ANGLE Privilege Escalation

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

SXP Platform DoS

The vulnerability of the Cisco Identity Services Engine ISE policy management platform’s SXP service is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Fedora 45 : cyrus-imapd (2026-3bf3e31ef4)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3bf3e31ef4 advisory. - New version 3.12.4 rhbz2500822 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 43 : cyrus-imapd (2026-97a7ec5786)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-97a7ec5786 advisory. - New version 3.10.4 rhbz2500822 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 44 : cyrus-imapd (2026-740bc1c6fa)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-740bc1c6fa advisory. - New version 3.12.4 rhbz2500822 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-92091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in jwcrypto. The JWK.importkey function validates the keyops JWK member for duplicate values using an algorithm with On^2 time complexity, and...