268388 matches found
PT-2026-95231
Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions prior to 3.7.50 Description Insufficient per-object ownership or capability checks occur when updating orders via the REST API. This allows users with the Instructor role to modify any order on the sit...
PT-2026-101965
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95232
Name of the Vulnerable Software and Affected Versions All-in-One WP Migration and Backup WordPress plugin versions prior to 7.111 Description Several AJAX actions do not perform proper capability checks and are instead protected by an installation-wide secret. This secret is disclosed to any user...
PT-2026-100841
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...
EulerOS Virtualization 2.11.1 : ppp (EulerOS-SA-2026-3453)
According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description...
EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2026-3735)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...
EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2026-3688)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...
EulerOS 2.0 SP10 : containerd (EulerOS-SA-2026-3733)
According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...
Fedora 45 : libheif (2026-73d31ad4c6)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-73d31ad4c6 advisory. Latest security bugfix release from upstream. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.4 . Resolves 3 high impact and 3 medium impac...
WP < 7.1.1 - Admin+ Network-Wide Plugin Activation on Multisite
Description WordPress does not properly restrict plugin activation on Multisite in some cases, which could allow site administrators to activate an installed plugin network-wide...
CVE-2026-89008: Exposure of Sensitive Information to an Unauthorized Actor
The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users with a low-privilege Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5-specific role to read other...
CVE-2026-93454 Aureus ERP through 1.6.0 Stored XSS via Payment Term Note
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin. Authenticated users with payment-term create permission can submit arbitrary JavaScript to the payment-terms endpoint, which persists to the database and executes in browse...
CVE-2026-93454
Aureus ERP through 1.6.0 contains a stored XSS in the Accounting plugin's Payment Term note field. The field is stored unsanitized and rendered as raw HTML, allowing any authenticated user with payment-term create permission to inject arbitrary JavaScript via the payment-terms endpoint. The paylo...
CVE-2026-93454 Aureus ERP through 1.6.0 Stored XSS via Payment Term Note
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin. Authenticated users with payment-term create permission can submit arbitrary JavaScript to the payment-terms endpoint, which persists to the database and executes in browse...
CVE-2026-93454 Aureus ERP through 1.6.0 Stored XSS via Payment Term Note
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plugin. Authenticated users with payment-term create permission can submit arbitrary JavaScript to the payment-terms endpoint, which persists to the database and executes in browse...
CVE-2026-15815
Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...
grafana: Grafana: Denial of Service via unbounded memory allocation in plugin resources endpoint
A flaw was found in Grafana. An authenticated user can exploit a vulnerability in the plugin resources endpoint by sending a request that causes unbounded memory allocation. This occurs when the system attempts to read the entire request body into memory. Successful exploitation can lead to an...
CVE-2026-15815 CVE-2026-15815 CVE Record
Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...
CVE-2026-15815
Grafana OSS and Grafana Enterprise failed to safely resolve symbolic links when extracting plugin archives. A crafted archive can chain relative symlink entries to escape the plugin installation directory, dropping an arbitrary executable that runs with the privileges of the Grafana server proces...
EUVD-2026-82472
Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...