490244 matches found
CVE-2026-87475
Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87467
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-87589
Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87558
Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-71809
Siam Ordering (siam-server ) version 1.0.0 is vulnerable to an Authentication Bypass caused by a hardcoded master verification code . This security flaw allows remote unauthenticated attackers to gain unauthorized access to the system, enabling them to log in as any user, merchant, or administrat...
CodeQL 2.27.0
Discover vulnerabilities across a codebase with CodeQL, an industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same...
CVE-2026-75307
The software zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting (XSS) . The flaw exists in the SVG file upload functionality accessible via the /equipmentFile/upload endpoint. This vulnerability allows for the execution of malicious scripts in a user's browser. While the vulnerability is docu...
Fedora 44 : openvpn (2026-725faae162)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-725faae162 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 44 : libevent (2026-72d10c874d)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-72d10c874d advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...
Slackware Linux 15.0 / current xz Vulnerability (SSA:2026-252-01)
The version of xz installed on the remote host is prior to 5.8.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-252-01 advisory. New xz packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding description blo...
CVE-2026-87059
A flaw was found in olm-operator-konflux-sample. The bundle builder stage installs and upgrades Python packages using pip, a package installer, without verifying their versions or using hash verification. This allows a malicious or compromised package to be introduced into the build process...
CVE-2026-6554 affecting package libpcap for versions less than 1.10.7-1
CVE-2026-6554 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...
CVE-2026-18313 affecting package libpcap for versions less than 1.10.7-1
CVE-2026-18313 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...
CVE-2026-75538 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-75538 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-70405 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-70405 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...