MiracleLinux 4 : cups-1.4.2-67.1.0.1.AXS4 (AXSA:2015-156:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-156:01 advisory. The Common UNIX Printing System provides a portable printing layer for UNIX operating systems. It has been developed by Easy Software Products to...

CVE-2026-0975: Improper Neutralization of Special Elements used in a Command

Delta Electronics DIAView has Command Injection vulnerability...

CVE-2025-68921: Improper Limitation of a Pathname to a Restricted Directory

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

CVE-2021-47821: Improper Validation of Specified Quantity in Input

RarmaRadio 2.72.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing network configuration fields with large character buffers. Attackers can generate a 100,000 character buffer and paste it into multiple network settings fields to trigger...

CVE-2025-62582: Missing Authentication for Critical Function

Delta Electronics DIAView has multiple vulnerabilities...

CVE-2025-64691: Improper Control of Generation of Code

The vulnerability, if exploited, could allow an authenticated miscreant OS standard user to tamper with TCL Macro scripts and escalate privileges to OS system, potentially resulting in complete compromise of the model application server...

CVE-2025-61937: Improper Control of Generation of Code

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the model application server...

WordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by daroo in WordPress Plugin Event Tickets with Ticket Scanner versions = 2.8.5...

CVE-2026-22645: Exposure of Sensitive Information to an Unauthorized Actor

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

CVE-2026-22912: URL Redirection to Untrusted Site

Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk including stealing credentials from unsuspecting users...

CVE-2026-22907: Incorrect Privilege Assignment

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data...

Linux Distros Unpatched Vulnerability : CVE-2026-0961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service CVE-2026-0961 Note that Nessus relies on the presence of the...

CVE-2025-36911: Undefined Security Weakness

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote proximal/adjacent information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-22646: Generation of Error Message Containing Sensitive Information

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information like file paths, database errors, or software versions that can be used to map the application's internal structu...

CVE-2026-22917: Allocation of Resources Without Limits or Throttling

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

CVE-2026-22910: Use of Weak Credentials

The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represents a high risk to the integrity of the system...

CVE-2026-22914: Incorrect Privilege Assignment

An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation...

CVE-2026-22913: Improper Neutralization of Input During Web Page Generation

Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data...

CVE-2026-22911: Use of Hard-coded Credentials

Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device...

CVE-2026-22919: Improper Neutralization of Input During Web Page Generation

An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting XSS attacks, leading to the extraction of sensitive data...