161 matches found
RHCOS 3 : OpenShift Container Platform 3.10 haproxy (RHSA-2019:0548)
The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0548 advisory. - haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash CVE-2018-20615 Note that Nessus has not...
CVE-2026-0548 Tutor LMS – eLearning and online course solution <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Limited Attachment Deletion
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized attachment deletion due to a missing capability check on the deleteexistinguserphoto function in all versions up to, and including, 3.9.4. This makes it possible for authenticated attackers, wi...
CVE-2026-0548
CVE-2026-0548 – Tutor LMS (WordPress) : Wordfence and Patchstack detail a vulnerability in Tutor LMS up to version 3.9.4 where a missing capability check in delete_existing_user_photo allows authenticated users with subscriber-level access or higher to delete arbitrary attachments on the site. Th...
CVE-1999-0548
A superfluous NFS server is running, but it is not importing or exporting any file systems...
EUVD-2026-0548
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
TencentOS Server 2: openssl098e (TSSA-2025:0548)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0548 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
CVE-2024-0548
A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE Command Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the...
Alibaba Cloud Linux 3 : 0057: microcode_ctl (ALINUX3-SA-2021:0057)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0057 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-11139: Improper conditions check ...
CVE-2023-0548
creationtimestamp| type| source ---|---|--- 2025-03-10 19:39:13+00:00| seen| Telegram/4UKnw2uSlMGeRijGoXOQb4KV1bJmreY1hqniR4BFXk7AUp...
SUSE: Security Advisory (SUSE-SU-2024:0548-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-0548 FreeFloat FTP Server SIZE Command denial of service
A vulnerability was found in FreeFloat FTP Server 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SIZE Command Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2024-0548
The CVE-2024-0548 entry concerns FreeFloat FTP Server 1.0. The SIZE Command Handler component is vulnerable, enabling remote denial-of-service. Exploitation is publicly disclosed. Remediation guidance from PT- security recommends temporarily mitigating by disabling the SIZE Command Handler (or re...
Important Photon OS Security Update - PHSA-2024-4.0-0548
Updates of 'linux-secure', 'linux-aws', 'linux-rt' packages of Photon OS have been released...
Rocky Linux 8 : nodejs:10 (RLSA-2021:0548)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:0548 advisory. - Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like ://:@::/...
Rocky Linux 8 : microcode_ctl (RLSA-2021:3027)
The remote Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2021:3027 advisory. - Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable...
WordPress Namaste! LMS Plugin < 2.5.9.4 is vulnerable to Cross Site Scripting (XSS)
Software Namaste! LMS Type Plugin Vulnerable versions 2.5.9.4 Fixed in 2.5.9.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0548 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2cc963427a7a Credits Felipe Restrepo Rodriguez...
CVE-2023-0548 Namaste! LMS < 2.5.9.4 - Admin+ Stored XSS
The Namaste! LMS WordPress plugin before 2.5.9.4 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-0548
The Namaste! LMS WordPress plugin is affected in versions before 2.5.9.4. The issue arises because the plugin does not fully sanitize/escape certain settings, enabling Stored XSS for high-privilege users (e.g., Administrators) even when unfiltered_html is disallowed (including multisite setups). ...
SUSE CVE-2014-0548
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow...
SUSE CVE-2020-0548
Cleanup errors in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...