161148 matches found
CVE-2026-93952: Improper Input Validation
VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...
CVE-2026-75432
A vulnerability exists in yaml-cpp version 0.9.0 where a remote attacker can obtain sensitive information . The flaw is located within the src/scanner.cpp file, specifically affecting the Scanner::PopIndent() and Scanner::PushIndentTo() components. The issue is caused by a flaw in how the scanner...
PT-2026-97025
Name of the Vulnerable Software and Affected Versions GPAC version 2d7da22e 26.08-DEV Description A NULL pointer dereference occurs in the gf sg vrml field clone function when cloning a PROTO default SFImage field with a NULL source pointer. A remote attacker can cause an application crash and...
CVE-2026-76708: Use of Hard-coded Credentials
A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...
CVE-2026-76710: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability exists in the Analytics and Location Engine ALE management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted requests to certain internal endpoints. Successful...
CVE-2026-95657: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...
CVE-2026-94491: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/searchlist.jsp. Executing a manipulation of the argument address can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and cou...
VulnCheck KEV: CVE-2026-93952
Arista VeloCloud Orchestrator VCO on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the...
CVE-2026-18134: Cleartext Transmission of Sensitive Information
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information...
CVE-2026-18172: Improper Restriction of XML External Entity Reference
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references...
ROS-20260922-73-0124
The vulnerability in golang-x-crypto is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000560)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000560 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...
Linux Distros Unpatched Vulnerability : CVE-2026-93331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libwebp (UTSA-2023-002880)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002880 advisory. Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libtar (UTSA-2026-090031)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090031 advisory. Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090246)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090246 advisory. A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with...
CVE-2026-76712: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability exists in the Analytics and Location Engine ALE that may allow for unauthorized access, information disclosure, or denial of service. An unauthenticated remote attacker could exploit the vulnerable system by sending specially crafted input or intercepting network communications...
CVE-2026-76716: Allocation of Resources Without Limits or Throttling
Multiple vulnerabilities exist in the Analytics and Location Engine ALE that may allow for unauthorized access or denial of service. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted input or leveraging improper security configurations. Successful...
CVE-2026-95820: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php?section=admin1. Performing a manipulation of the argument image results in unrestricted...