91383 matches found
Nikto Web Scanner 2.6.1
Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers...
CVE-2026-14540: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client...
CVE-2026-17561: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115...
CVE-2026-56571: Generation of Error Message Containing Sensitive Information
HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout, and hundreds of other common conditions can cause errors to be generated...
CVE-2026-34495: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM Systems Employee: before 2025.3.1...
CVE-2026-51785: Improper Control of Generation of Code
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request...
CVE-2026-34497: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting XSS. This issue affects FM Systems Employee: before 2025.3.1...
CVE-2026-14921: Improper Neutralization of Input During Web Page Generation
The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.5's shared link-rendering function, UltimateVCAddons::uavclinkinit,...
CVE-2026-43833: Undefined Security Weakness
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43830: Improper Neutralization of Special Elements used in a Command
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829: Stack-based Buffer Overflow
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831: Stack-based Buffer Overflow
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-21662: Unrestricted Upload of File with Dangerous Type
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1...
CVE-2026-18321: Buffer Copy without Checking Size of Input
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-43832: Stack-based Buffer Overflow
Full details and mitigation steps are currently restricted and will be published at a later date...
openvas-scanner v23.50.8
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)
Last week, there were 264 vulnerabilities disclosed in 210 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 117 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
SUSE CVE-2026-59250
Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...
vuls v0.40.1
Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...
