9377 matches found
CVE-2026-105220
Twine 2 Desktop (versions through 2.12.0 ) is vulnerable to Arbitrary Code Execution due to a cross-site scripting (XSS) flaw in the importStories() function. The root cause is a failure to properly sanitize markup during the import of story files, which allows malicious scripts to execute within...
PT-2026-104654
Name of the Vulnerable Software and Affected Versions Twine 2 desktop versions prior to 2.12.1 Description A cross-site scripting issue exists in the importStories function that allows the execution of markup from imported story files within the editor window. An attacker can create a malicious...
CVE-2020-37278
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...
CVE-2020-37278
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability in the saveYZJFile endpoint. Remote attackers can access arbitrary files on the host system, such as /etc/passwd , configuration files, or credentials, by supplying a file: URL to the downloadUrl parameter. Additionally...
CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...
CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...
EUVD-2020-31274
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...
CVE-2026-32585
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0...
EUVD-2026-91659
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0...
CVE-2026-32585 WordPress Airano MCP Bridge plugin <= 2.11.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0...
CVE-2026-32585
The airano Airano MCP Bridge WordPress plugin (versions
CVE-2026-32585 WordPress Airano MCP Bridge plugin <= 2.11.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0...
WordPress Airano MCP Bridge plugin <= 2.11.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Airano MCP Bridge versions = 2.11.0...
PT-2026-104349
Name of the Vulnerable Software and Affected Versions Airano MCP Bridge versions prior to 2.11.0 Description Missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Update Airano MCP Bridge to version 2.11.0 or later...
CVE-2026-32585: Missing Authorization
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0...
CVE-2020-37278: Server-Side Request Forgery (SSRF)
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...
PT-2026-104413
Name of the Vulnerable Software and Affected Versions Weaver e-Bridge affected versions not specified Description An unauthenticated arbitrary file read flaw allows remote attackers to access files on the host system, such as /etc/passwd or configuration and credential files. This is achieved by...
VulnCheck KEV: CVE-2020-37278
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...
Rocky Linux 9.4 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc (ciqsa-2026_1332)
The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261332 advisory. This advisory aggregates security fixes for the cockpit SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2026-4631. Tenable has extracted the preceding description...
CentOS Linux 7.9 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-devel / libtiff-static / etc Multiple Vulnerabilities (ciqsa-2026_0705)
The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260705 advisory. This advisory aggregates security fixes for the libtiff SRPM in CIQ CentOS Bridge 7.9. It addresses 5 CVEs: CVE-2024-7006, CVE-2020-35523, CVE-2023-3164...