207764 matches found
JFrog Artifactory 7.94.x < 7.117.10 XSS
According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.94.x prior to 7.117.10. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43493)
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAYBACKLOG requests MAYBACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications. This plugin only works with Tenable.ot. Please visit...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31642)
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion Fix rxrpc call removal from the rxnet-calls list to use listdelrcu rather than listdelinit to prevent stuffing up reading /proc/net/rxrpc/calls from potentially getting into an...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-57993)
In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: Fix warning in thrustmasterprobe by adding endpoint check syzbot has found a type mismatch between a USB pipe and the transfer endpoint, which is triggered by the hid-thrustmaster driver1. There is a number...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53168)
In the Linux kernel, the following vulnerability has been resolved: fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and FUSENOTIFYRETRIEVE allow the FUSE daemon to actively write/read pagecache contents. For directories with FOPENCACHEDIR, the pagecache is used...
JFrog Artifactory 7.117.x < 7.117.25 Multiple Vulnerabilities
According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities: - A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and...
K000163776: GnuTLS vulnerability CVE-2026-42011
Security Advisory Description A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities CAs only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint...
GO-2026-6774 Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context in github.com/0xJacky/Nginx-UI
Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context in github.com/0xJacky/Nginx-UI...
CVE-2026-112778
Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service...
CVE-2026-96238
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-110688
Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incrparse. At the first non-ASCII byte in a string, the decoder validates UTF-8 from there to the end of its input. incrparse decodes each buffered value with a fresh...
EUVD-2026-104584
Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation
A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil pointer dereference in response validation
A flaw was found in kin-openapi. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering an application crash during response validation. When an OpenAPI specification declares a response header using content rather than a schema, the validation logic attempts to...
CVE-2026-106547
A flaw was found in HDF5. An attacker could exploit this heap-based buffer overflow by providing a specially crafted HDF5 file to an application. Due to improper metadata validation when reading unallocated dataset chunks, the library writes data past the boundary of an allocated memory buffer...
CVE-2026-85247
CVE-2026-85247 — camel-knative: improper certificate validation TLS on turns validation off Runnable proof-of-concept reproducer for the Apache Camel vulnerability where enabling SSL on the Knative HTTP client without configuring a truststore fell back to trusting every presented certificate rath...
CVE-2026-1501
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation...
CVE-2026-93326
A flaw was found in BuildKit. An attacker with the ability to define build steps can bypass policy validation rules by supplying a specially crafted Git source. During a clone operation, this issue allows the repository to spoof its remote URL, making untrusted source code appear to originate fro...
CVE-2026-98514
A flaw was found in the Linux kernel's Nouveau graphics driver, which can lead to a Denial of Service DoS. A local user can trigger this flaw during graphics buffer validation operations that encounter specific error paths. Because the driver fails to properly release object references when these...
