265666 matches found
OctoberCMS - Account Takeover
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...
Sonicwall - Pre-Authentication Arbitrary File Read
Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure...
Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...
CLEANSTART-2026-NN31666 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the consul package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-BX44757 For certain crafted inputs, a 'ed25519
Security vulnerability affects the consul package. For certain crafted inputs, a 'ed25519...
CLEANSTART-2026-RO22308 (*x509
Security vulnerability affects the consul package. x509...
CLEANSTART-2026-YC32527 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the consul package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-TQ62696 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the consul package. gRPC-Go is the Go language implementation of gRPC...
Fedora 45 : slurm (2026-74510edd4e)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-74510edd4e advisory. Update to 26.05.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
ROOT-APP-MAVEN-CVE-2026-43515 CVE-2026-43515 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-43515 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1790864771 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.12-tuxcare.2...
ROOT-APP-MAVEN-CVE-2026-2332 CVE-2026-2332 in org.eclipse.jetty:jetty-http - Patched by Root
Root has patched CVE-2026-2332 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...
CLEANSTART-2024-SF85133 Inappropriate implementation in Referrer in Google Chrome prior to 89
Security vulnerability affects the chromium package. Inappropriate implementation in Referrer in Google Chrome prior to 89...
CLEANSTART-2026-RX54054 As mitigation for CVE-2020-1945 Apache Ant 1
Security vulnerability affects the gradle8 package. As mitigation for CVE-2020-1945 Apache Ant 1...
CLEANSTART-2024-VG67704 Data race in audio in Google Chrome prior to 89
Security vulnerability affects the chromium package. Data race in audio in Google Chrome prior to 89...
CLEANSTART-2024-CH43456 In GNOME glib-networking through 2
Security vulnerability affects the glib-networking package. In GNOME glib-networking through 2...
CLEANSTART-2023-LD05714 GNOME Geary before 3
Security vulnerability affects the geary package. GNOME Geary before 3...
CLEANSTART-2024-DV35660 Go Ethereum (aka geth) through 1
Security vulnerability affects the geth package. Go Ethereum aka geth through 1...
CLEANSTART-2024-OD49097 Inappropriate implementation in Compositing in Google Chrome prior to 92
Security vulnerability affects the chromium package. Inappropriate implementation in Compositing in Google Chrome prior to 92...