.NET and the Visual Privilege Escalation

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of checking for the return value. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Proxmox.inc.php XSS

The vulnerability of the proxmox.inc.php script in the LibreNMS network monitoring system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

.NET Visual Studio Code Critical Data Deletion DoS

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Password component Code Execution

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Device Trust Component Code Execution

The vulnerability of the Device Trust component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

ANGLE Privilege Escalation

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

SXP Platform DoS

The vulnerability of the Cisco Identity Services Engine ISE policy management platform’s SXP service is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco Secure Firewall Security Bypass

The vulnerabilities of Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA, as well as the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software, are related to the compromise of the data protection...

Cisco Secure Email Resource Control DoS

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...

Ruby IMAP Library CRLF Injection

The vulnerability in the client API library for the IMAP protocol in Ruby is related to the failure to implement measures to neutralize CRLF sequences. Exploiting this vulnerability allows an attacker to execute arbitrary IMAP commands remotely...

Check Point Security Management Server Path Traversal

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in incorrect path name restrictions for accessing the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PyPart Set Deep Slice Data Unauthorized Access

The vulnerability of the PyPart::setDeepSliceData function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...

Oracle Linux 8 : libxml2 (ELSA-2026-69655)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69655 advisory. 2.9.7-21.8 - Lower xpath recursion limits RHEL-249282 2.9.7-21.8 - Fix CVE-2026-6653 RHEL-215616 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : libtiff (ELSA-2026-69095)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69095 advisory. 4.0.9-39 - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation RHEL-248298 Tenable has extracted the preceding description block directly...

CVE-2026-95833 itsourcecode Leave Management System index.php sql injection

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

CVE-2026-95833 itsourcecode Leave Management System index.php sql injection

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

CVE-2026-95833

A SQL injection vulnerability exists in the itsourcecode Leave Management System 1.0 . The flaw is located in an unknown function within the file /module/leavetype/index.php , where a lack of proper input validation on the ID argument allows an attacker to execute arbitrary SQL commands. This vul...

CVE-2026-95830 theRealSain Pixtream post_upload.php unrestricted upload

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /postupload.php. The manipulation of the argument media results in unrestricted upload. The attack can be launched remotely. The explo...

CVE-2026-95830

A security flaw in theRealSain Pixtream (up to commit 866afd4f0cea812b918780fb74b67dccf8c4d6a0) allows for an unrestricted upload via remote manipulation of the media argument in the /post_upload.php file. This vulnerability can be exploited remotely, and a public exploit is currently available f...

CVE-2026-95830 theRealSain Pixtream post_upload.php unrestricted upload

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /postupload.php. The manipulation of the argument media results in unrestricted upload. The attack can be launched remotely. The explo...