MiracleLinux 9 : firefox-140.11.0-1.el9_8.ML.1 (AXSA:2026-1314:17)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1314:17 advisory. firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component CVE-2026-8388 firefox: Other issue in the JavaScript Engine component...

kinto-dist (>=7.0.0, <=7.3.1) potentially affected by CVE-2024-1314 via kinto-attachment (3.0.1)

kinto-attachment PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist =7.0.0, =7.3.1 Source cves: CVE-2024-1314 Source advisory: OSV:PYSEC-2026-1494...

kinto-dist (>=0.7.0, <=0.8.2) potentially affected by CVE-2024-1314 via kinto-attachment (0.8.0)

kinto-attachment PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist =0.7.0, =0.8.2 Source cves: CVE-2024-1314 Source advisory: OSV:PYSEC-2026-1494...

kinto-dist (>=1.0.0, <=1.11.0) potentially affected by CVE-2024-1314 via kinto-attachment (1.0.1)

kinto-attachment PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist =1.0.0, =1.11.0 Source cves: CVE-2024-1314 Source advisory: OSV:PYSEC-2026-1494...

kinto-dist (>=1.12.0, <=1.13.0) potentially affected by CVE-2024-1314 via kinto-attachment (1.1.2)

kinto-attachment PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist =1.12.0, =1.13.0 Source cves: CVE-2024-1314 Source advisory: OSV:PYSEC-2026-1494...

kinto-dist (4.5.2) potentially affected by CVE-2024-1314 via kinto-attachment (2.0.1)

kinto-attachment PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist 4.5.2 Source cves: CVE-2024-1314 Source advisory: OSV:PYSEC-2026-1494...

kinto-dist (>=2.0.0, <=6.0.2) potentially affected by CVE-2024-1314 via kinto-attachment (2.1.0)

kinto-attachment PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist =2.0.0, =6.0.2 Source cves: CVE-2024-1314 Source advisory: OSV:PYSEC-2026-1494...

CVE-2026-1314

creationtimestamp| type| source ---|---|--- 2026-04-15 00:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjimprprmr2o 2026-04-22 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgtcu522h...

SUSE SLES15 / openSUSE 15 Security Update : ignition (SUSE-SU-2026:1314-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1314-1 advisory. This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper...

EUVD-2026-1314

The Simcast plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the settingsPage function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged...

kinto-dist (>=0.7.0, <=18.0.2) potentially affected by CVE-2024-1314 via kinto-attachment (>=0.8.0, <=6.0.2)

kinto-attachment PYPI version =0.8.0, =0.7.0, =18.0.2 Source cves: CVE-2024-1314 Source advisory: MEND:CVE-2024-1314...

CVE-2011-1314

The Service Integration Bus SIB messaging engine in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service daemon hang by performing close operations via network connections to a queue manager...

CVE-2025-1314

creationtimestamp| type| source ---|---|--- 2025-03-20 09:02:17+00:00| seen| https://t.me/cvedetector/20697 2025-03-20 09:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomlg2n2x 2025-03-20 18:20:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8251...

CVE-2025-1314 Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.5. This is due to missing or incorrect nonce validation on the ctfclearcacheadmin function. This makes it possible for...

CVE-2025-1314 Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.5. This is due to missing or incorrect nonce validation on the ctfclearcacheadmin function. This makes it possible for...

Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2024-1314)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 9 : postgresql:15 (RHSA-2024:1314)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1314 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW...

openSUSE: Security Advisory for libqt5 (openSUSE-SU-2022:10049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kinto-dist (>=0.7.0, <=0.8.2) potentially affected by CVE-2024-1314 via kinto-attachment (0.8.0)

kinto-attachment PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist =0.7.0, =0.8.2 Source cves: CVE-2024-1314 Source advisory: OSV:GHSA-HVP4-VRV2-8WRQ...

kinto-dist (>=1.0.0, <=1.11.0) potentially affected by CVE-2024-1314 via kinto-attachment (1.0.1)

kinto-attachment PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on kinto-attachment and may be impacted: - kinto-dist =1.0.0, =1.11.0 Source cves: CVE-2024-1314 Source advisory: OSV:GHSA-HVP4-VRV2-8WRQ...