490153 matches found
EUVD-2026-66127
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...
CVE-2026-75325
DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...
CVE-2026-75340
The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...
CVE-2026-75325
DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...
PT-2026-82229
Name of the Vulnerable Software and Affected Versions CTFd version 3.7.6 Description CTFd is susceptible to a man-in-the-middle attack, which occurs when an attacker intercepts and potentially alters communication between two parties who believe they are communicating directly with each other...
PT-2026-82255
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...
PT-2026-82284
Name of the Vulnerable Software and Affected Versions Dell PowerProtect Cyber Recovery versions prior to 20.3 Description An improper authentication issue exists where a low privileged attacker with remote access could potentially gain unauthorized access. Recommendations Update Dell PowerProtect...
OPENSUSE-SU-2026:11616-1 python313-geopandas-1.1.4-1.1 on GA media
These are all security issues fixed in the python313-geopandas-1.1.4-1.1 package on the GA media of openSUSE Tumbleweed...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098913)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098913 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the...
Fedora 44 : libopenmpt (2026-a6d074ea9c)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a6d074ea9c advisory. Security uppdate from 0.8.7 to 0.8.9 plus bug-fixes: https://lib.openmpt.org/libopenmpt/2026/08/19/security-updates-0.8.9-0.7.21-0.6.30-0.5.44-0.4.56/...
Fedora 44 : sympa (2026-eca56df39d)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eca56df39d advisory. Update to 6.2.80 https://github.com/sympa-community/sympa/releases/tag/6.2.80 Tenable has extracted the preceding description block directly from the Fedora...
PT-2026-82348
Name of the Vulnerable Software and Affected Versions Spring Data REST versions 3.7.20 and earlier Spring Data REST versions 4.0.0 through 4.4.15 Spring Data REST versions 4.5.0 through 4.5.12 Spring Data REST versions 5.0.0 through 5.0.6 Spring Data REST version 5.1.0 Description An issue exists...
CVE-2026-36851
UnPoller version 2.33.0 is vulnerable to a path traversal vulnerability in the password field. The application fails to perform path checks when a password starts with the file:// prefix, causing it to read arbitrary files from the local disk via os.ReadFile() in pkg/inputunifi/input.go. An attac...
Vinyl Cache: Multiple Vulnerabilities
Background Vinyl Cache is a web application accelerator. Vinyl Cache was previously named Varnish. Description Multiple vulnerabilities have been discovered in Vinyl Cache. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...
CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30
CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...
CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30
CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...
CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2
CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...
CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2
CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...