Lucene search
K

59 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2020-26558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey us...

4.3CVSS7AI score0.00023EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/15 2:27 p.m.6 views

CVE-2025-26558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...

6.5CVSS7.2AI score0.00131EPSS
Exploits0References1
Circl
Circl
added 2025/02/13 2:17 p.m.4 views

CVE-2025-26558

creationtimestamp| type| source ---|---|--- 2025-02-13 14:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uvaqrz72g 2025-02-13 14:26:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113997038213697231 2025-02-13 15:12:24+00:00| seen|...

6.5CVSS7.3AI score0.00131EPSS
Exploits0References5
NVD
NVD
added 2025/02/13 2:16 p.m.7 views

CVE-2025-26558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...

6.5CVSS0.00131EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/13 1:52 p.m.14 views

CVE-2025-26558 WordPress Aparat Responsive plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...

6.5CVSS0.00131EPSS
Exploits0References1
CVE
CVE
added 2025/02/13 1:52 p.m.61 views

CVE-2025-26558

CVE-2025-26558 concerns the WordPress plugin Aparat Responsive (mkkmail Aparat Responsive). Affected: Aparat Responsive up to version 1.3. Issue: improper neutralization of input during web page generation, leading to DOM-based XSS. Impact is cross-site scripting when rendering vulnerable pages; ...

6.5CVSS7.2AI score0.00131EPSS
Exploits0References1
Circl
Circl
added 2024/10/01 5:45 p.m.0 views

CVE-2020-26558

creationtimestamp| type| source ---|---|--- 2024-10-01 17:45:54+00:00| seen| https://t.me/cvedetector/6762...

4.3CVSS6.6AI score0.00023EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/08/16 12:0 a.m.52 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2923-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2923-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

7.8CVSS7.6AI score0.00147EPSS
Exploits0References86
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.38 views

RHEL 7 : bluez (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS o...

8.8AI score0.36549EPSS
Exploits19References23
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.33 views

Oracle Linux 8 : bluez (ELSA-2021-4432)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4432 advisory. 5.56-1 + bluez-5.56-1 - Fixing 1965057 - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 Tenable has extracted the preceding...

4.3CVSS7AI score0.00023EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/10/24 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2022:3691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.7AI score0.00172EPSS
Exploits2References8
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.22 views

Ubuntu: Security Advisory (USN-5299-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.01405EPSS
Exploits6References2
CBLMariner
CBLMariner
added 2022/05/26 7:4 p.m.13 views

CVE-2020-26558 affecting package kernel 5.10.111.1-1

CVE-2020-26558 affecting package kernel 5.10.111.1-1. A patched version of the package is available...

4.3CVSS7.4AI score0.00023EPSS
Exploits0
Circl
Circl
added 2021/11/11 12:37 p.m.1 views

CVE-2021-26558

creationtimestamp| type| source ---|---|--- 2021-11-11 12:37:18+00:00| seen| https://t.me/cibsecurity/32234...

7.5CVSS7.3AI score0.01127EPSS
Exploits0References1
NVD
NVD
added 2021/11/11 10:15 a.m.9 views

CVE-2021-26558

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0...

7.5CVSS0.01127EPSS
Exploits0References2
CVE
CVE
added 2021/11/11 9:35 a.m.38 views

CVE-2021-26558

The CVE-2021-26558 issue is a Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-UI. Affected software: Apache ShardingSphere-UI, versions 4.1.1 and later, with versions prior to 5.0.0 also mentioned as affected. Root cause: insecure/deserialization of serialized user data p...

7.5CVSS7.5AI score0.01127EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/11 9:35 a.m.7 views

CVE-2021-26558 Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0...

7.7AI score0.01127EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.69 views

RHEL 8 : bluez (RHSA-2021:4432)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4432 advisory. The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start script...

4.3CVSS7.1AI score0.00023EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.62 views

CentOS 8 : bluez (CESA-2021:4432)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4432 advisory. - bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack CVE-2020-26558 Note that Nessus has not tested for this issue but...

4.3CVSS7AI score0.00023EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2021/11/09 6:5 p.m.46 views

Moderate: Red Hat Security Advisory: bluez security update

An update for bluez is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

4.3CVSS6.9AI score0.00023EPSS
Exploits0References3
Rows per page
Query Builder