42226 matches found
GHSA-Q6VJ-WXVF-5M8C vulnerabilities
Vulnerabilities for packages: openexr...
CVE-2026-33936 vulnerabilities
Vulnerabilities for packages: awx, airflow...
EUVD-2025-209270
A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an...
CVE-2026-4292
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...
UBUNTU-CVE-2026-4292
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...
CVE-2026-4176 vulnerabilities
Vulnerabilities for packages: perl...
Benchmarking-Agent-Architectures
Benchmarking Agent Architectures for LLM-Based Exploit Gener...
gstreamer-plugins-ugly: GStreamer: Arbitrary code execution via ASF file processing
A flaw was found in GStreamer. This heap-based buffer overflow vulnerability in the ASF Demuxer component allows a remote attacker to execute arbitrary code. The issue arises from insufficient validation of user-supplied data length when processing stream headers within ASF Advanced Systems Forma...
CVE-2026-34519 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, airflow, kubeflow-pipelines-visualization-server, kserve, py3-cassandra-medusa, checkov, open-webui...
From Incomplete Architecture to Quantified Risk: Multimodal LLM-Driven Security Assessment for Cyber-Physical Systems
Cyber-physical systems often contend with incomplete architectural documentation or outdated information resulting from legacy technologies, knowledge management gaps, and the complexity of integrating diverse subsystems over extended operational lifecycles. This architectural incompleteness...
CritBench: A Framework for Evaluating Cybersecurity Capabilities of Large Language Models in IEC 61850 Digital Substation Environments
The advancement of Large Language Models LLMs has raised concerns regarding their dual-use potential in cybersecurity. Existing evaluation frameworks overwhelmingly focus on Information Technology IT environments, failing to capture the constraints, and specialized protocols of Operational...
Linux Distros Unpatched Vulnerability : CVE-2026-33816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory-safety vulnerability in github.com/jackc/pgx/v5. CVE-2026-33816 Note that Nessus relies on the presence of the package as reported by the vendor. C...
Linux Distros Unpatched Vulnerability : CVE-2026-5732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbi...
PT-2026-30802
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GENESIS64 versions prior to 10.97.3 Mitsubishi Electric ICONICS Suite versions prior to 10.97.3 Mitsubishi Electric MobileHMI versions prior to 10.97.3 Mitsubishi Electric Hyper Historian versions prior to 10.97.3 Mitsubish...
Linux Distros Unpatched Vulnerability : CVE-2026-23459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iptunnel: adapt iptunnelxmitstats to NETDEVPCPUSTATDSTATS Blamed commits forgot that vxlan/geneve use udptunnel6xmitskb which call iptunnelxmitstats...
Linux Distros Unpatched Vulnerability : CVE-2026-28389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary:...
CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6
CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6. A patched version of the package is available...
CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3
CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...