59 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-26558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey us...
CVE-2025-26558
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...
CVE-2025-26558
creationtimestamp| type| source ---|---|--- 2025-02-13 14:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uvaqrz72g 2025-02-13 14:26:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113997038213697231 2025-02-13 15:12:24+00:00| seen|...
CVE-2025-26558
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...
CVE-2025-26558 WordPress Aparat Responsive plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...
CVE-2025-26558
CVE-2025-26558 concerns the WordPress plugin Aparat Responsive (mkkmail Aparat Responsive). Affected: Aparat Responsive up to version 1.3. Issue: improper neutralization of input during web page generation, leading to DOM-based XSS. Impact is cross-site scripting when rendering vulnerable pages; ...
CVE-2020-26558
creationtimestamp| type| source ---|---|--- 2024-10-01 17:45:54+00:00| seen| https://t.me/cvedetector/6762...
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2923-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2923-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...
RHEL 7 : bluez (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS o...
Oracle Linux 8 : bluez (ELSA-2021-4432)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4432 advisory. 5.56-1 + bluez-5.56-1 - Fixing 1965057 - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 Tenable has extracted the preceding...
SUSE: Security Advisory (SUSE-SU-2022:3691-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-5299-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-26558 affecting package kernel 5.10.111.1-1
CVE-2020-26558 affecting package kernel 5.10.111.1-1. A patched version of the package is available...
CVE-2021-26558
creationtimestamp| type| source ---|---|--- 2021-11-11 12:37:18+00:00| seen| https://t.me/cibsecurity/32234...
CVE-2021-26558
Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0...
CVE-2021-26558
The CVE-2021-26558 issue is a Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-UI. Affected software: Apache ShardingSphere-UI, versions 4.1.1 and later, with versions prior to 5.0.0 also mentioned as affected. Root cause: insecure/deserialization of serialized user data p...
CVE-2021-26558 Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0...
RHEL 8 : bluez (RHSA-2021:4432)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4432 advisory. The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start script...
CentOS 8 : bluez (CESA-2021:4432)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4432 advisory. - bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack CVE-2020-26558 Note that Nessus has not tested for this issue but...
Moderate: Red Hat Security Advisory: bluez security update
An update for bluez is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...