33869 matches found
Oracle Linux 9 : perl-Date-Manip (ELSA-2026-56970)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-56970 advisory. 6.85-3.1 - Fix CVE-2026-60075: prevent ReDoS via long whitespace runs in date/time parsing Related: RHEL-239797 Tenable has extracted the preceding description...
Oracle Linux 8 : perl-Date-Manip (ELSA-2026-57562)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-57562 advisory. - Fix CVE-2026-60075: prevent ReDoS via crafted strings with long interior whitespace runs in date/time parsing Tenable has extracted the preceding description...
CVE-2026-53525: Observable Timing Discrepancy
WeeChat Wee Enhanced Environment for Chat is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions weechatstrcasecmp and strcmp to verify password hashes and plaintext passwords. An attacker can exploit timing...
PT-2026-79498
Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description Arc Enterprise's Raft FSM Finite State Machine in the applyRegisterFile function accepts attacker-chosen file paths in manifest-registration proposals without validating them against the...
PT-2026-79499
Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...
strelka v1.0.2
Releases | Documentation | Pull Requests | Issues !Pull...
CVE-2026-53424 Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions
Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it. Samly.Helper.decodeidpauthresp/3 in lib/samly/helper.ex calls esamlsp:validateassertion/2, whose default duplicate detector is ...
CVE-2026-64846
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...
EUVD-2026-63424
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...
CVE-2026-64846
Nix versions prior to 2.35.0 contain a TOCTOU race in the LocalStore restore path: writeFile opens a path with O_TRUNC instead of enforcing FinalSymlink::DontFollow, allowing a malicious derivation (with recursive-nix enabled) to create or truncate an empty file outside the build sandbox with dae...
CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...
CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
Malicious versions of the arrayref Rust crate and others executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios...
[SECURITY] Fedora 43 Update: ntpsec-1.2.5-1.fc43
NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...
[SECURITY] Fedora 44 Update: ntpsec-1.2.5-1.fc44
NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...
CVE-2026-58436
A flaw was found in Gitea. An unauthenticated remote attacker could exploit a quadratic-time algorithm in the ParseAcceptLanguage function, specifically within the Locale middleware. This vulnerability allows an attacker to send specially crafted requests, leading to excessive resource consumptio...
EUVD-2026-62896
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject Search Processing Language SPL into saved-search dispatch requests. This could allow for unauthorized access to all relevant data and affect system...
CVE-2026-18420: Improperly Controlled Modification of Object Prototype Attributes
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
PT-2026-79120
Name of the Vulnerable Software and Affected Versions OpenSearch Dashboards versions prior to 3.8 Description Improper input validation in the Time Series Visual Builder TSVB plugin allows an authenticated remote user to execute arbitrary code on the server. This is achieved by sending a crafted...
