175185 matches found
Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-1952)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1952 advisory. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected...
CVE-2026-26081
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...
Cisco ASA/FTD Persistent Local Code Execution (CVE-2024-20359)
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plugins and that has been available in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code wi...
ALSA-2026:41947 Important: nodejs:22 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to read arbitrary files.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...
The vulnerability of the siman.exe executable file of Rockwell Automation Arena’s discrete event simulation and automation software allows a hacker to execute arbitrary code.
The vulnerability of the siman.exe executable file of Rockwell Automation Arena’s discrete event simulation and automation software is related to the execution of operations beyond the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker ...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
Linux Distros Unpatched Vulnerability : CVE-2026-53383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: reject non-VALID session in compound request branch smb2checkusersession takes a shortcut for any operation that is not the first in a COMPOUND request: ...
Adobe ColdFusion 2023.x < 2023u22 / 2025.x < 2025u11 Multiple Vulnerabilities (APSB26-82)
The version of Adobe ColdFusion installed on the remote Windows host is prior to 2023.x update 22 or 2025.x update 11. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-82 advisory. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
TencentOS Server 3: container-tools:rhel8 (TSSA-2026:0671)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0671 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Important: .NET 9.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...
The vulnerability of the Content Credentials SDK libraries lies in the insufficient validation of requests on the server side, allowing attackers to increase their privileges.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow attackers to enhance their privileges...
Nimux 1.0.2
Nimux is a native command surface for authorized security assessments. It combines network enumeration, credential validation, Active Directory operations, Kerberos workflows, remote execution, file movement, secrets collection, DCSync, GPO operations, database clients, and SOCKS routing into one...
Linux Distros Unpatched Vulnerability : CVE-2026-35590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the ran...
Linux Distros Unpatched Vulnerability : CVE-2026-15588
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce...
Linux Distros Unpatched Vulnerability : CVE-2026-63958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: validate connector number in ucsiconnectorchange The connector number in a UCSI CCI notification is a 7-bit field supplied by the PPM...
PT-2026-61644
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the i2c-stub driver, a development and test tool. The stub xfer function fails to validate the transfer length against I2C SMBUS BLOCK MAX when handling the I2C SMBUS...
