299933 matches found
CVE-2026-96334: Missing Authorization
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...
CVE-2026-96518: Missing Authorization
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-96337: Missing Authorization
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-94663: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...
CVE-2026-87109: Insertion of Sensitive Information Into Sent Data
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...
Linux Distros Unpatched Vulnerability : CVE-2026-61801
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix- style user and group database files. Versions before 0.4....
Linux Distros Unpatched Vulnerability : CVE-2026-56866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the reque...
RockyLinux 10 : sssd (RLSA-2026:77534)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:77534 advisory. sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation CVE-2026-87853 Tenable has extracted the preceding description block directly...
PT-2026-108798
Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An authorization bypass exists due to a user-controlled key. A low privileged attacker with remote access can exploit this issue to achieve elevation of...
CVE-2026-62040: Missing Authorization
Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...
PT-2026-108962
Name of the Vulnerable Software and Affected Versions AWS Tools for PowerShell versions prior to 5.0.306 Description Sensitive information is inserted into log files, which may allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log...
PT-2026-108877
Name of the Vulnerable Software and Affected Versions Restrict User Access – Membership Plugin with Force versions prior to 2.8.2 Description A missing authorization issue exists that allows the exploitation of incorrectly configured access control security levels. Recommendations Update to versi...
PT-2026-108832
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...
PT-2026-109322
Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.4.0 Description Vikunja stores password-reset, email-confirmation, and account-deletion tokens in plaintext within the user tokens table. The genToken function in pkg/user/token.go saves raw random strings without...
PT-2026-108857
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-107783: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...
PT-2026-108859
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-107822: Use of Incorrectly-Resolved Name or Reference
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. ...
AlmaLinux 10 : sssd (ALSA-2026:77534)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:77534 advisory. sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation CVE-2026-87853 Tenable has extracted the preceding description block directly fr...
PT-2026-108855
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...