24363 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-55662
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
CVE-2026-47124
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all servers, including servers owned by other users...
CVE-2026-47124 Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all servers, including servers owned by other users...
GHSA-GV7W-RQVM-QJHR
creationtimestamp| type| source ---|---|--- 2026-06-12 20:38:57+00:00| seen| https://gist.github.com/konard/f83ae7aaab029a650fe9054d8205dac4 2026-06-13 16:40:27+00:00| seen| https://gist.github.com/konard/10edfaf46f7ba58bdd3e22a15167f9bc 2026-06-13 16:54:05+00:00| seen|...
Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)
Radius Controller May Delete a Container Resource via an Injected Deployment Annotation Multi-Tenant Installs Summary A configuration-validation issue in the Radius Kubernetes controller can cause it to issue a DELETE for the container resource referenced by a tampered radapp.io/status annotation...
GHSA-FP5J-4FJ2-4JVQ Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)
Radius Controller May Delete a Container Resource via an Injected Deployment Annotation Multi-Tenant Installs Summary A configuration-validation issue in the Radius Kubernetes controller can cause it to issue a DELETE for the container resource referenced by a tampered radapp.io/status annotation...
CVE-2026-46054
creationtimestamp| type| source ---|---|--- 2026-06-12 19:13:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116738725787227262 2026-07-02 06:49:04+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:17:49+00:00|...
CVE-2026-45833
creationtimestamp| type| source ---|---|--- 2026-06-12 18:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dbluklu2x...
CVE-2026-45830
creationtimestamp| type| source ---|---|--- 2026-06-12 17:58:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4cvvqt7s2f...
MINI-X7XG-RVWP-6374
Bulletin has no description...
Exploit for CVE-2026-49777
CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pr...
CGA-R78V-2M6W-5437
Bulletin has no description...
CVE-2026-44250
creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2oixus2w...
VRChat says reported data breach never happened
A data breach notice has been filed with the Maine Attorney General, saying more than 2.4 million users of VRChat have had their data breached. The question is, was it VRChat who filed the breach notice, or did someone pretending to represent the company post it instead? On Reddit, a VRChat...
CVE-2026-40995
CVE-2026-40995 affects Spring Web Services versions 3.1.0–3.1.8, 4.0.0–4.0.18, 4.1.0–4.1.3, and 5.0.0–5.0.1. The issue arises in the X509AuthenticationProvider, which could issue a fully authenticated X509AuthenticationToken when a presented certificate maps to a UserDetails, without applying Spr...
Chatwoot Scanner
This is a security assessment tool designed to evaluate authentication status, response behavior, and possible exposure indicators in Chatwoot conversation filtering functionality...
VMware Spring Web Services 安全漏洞
VMware Spring Web Services is a SOAP Web services development framework provided by the American company VMware. There are security vulnerabilities in versions 5.0.0 to 5.0.1, 4.1.0 to 4.1.3, 4.0.0 to 4.0.18, and 3.1.0 to 3.1.8 of VMware Spring Web Services. These vulnerabilities stem from the...
ALSA-2026:25341 Important: tomcat9 update
Certificate revocation bypass due to improper OCSP response validation...