GO-2024-2746 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubernetes, local-static-provisioner, nodetaint, kubeflow-pipelines, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, aws-efs-csi-driver, argocd-image-updater, spark-operator...

MINI-P9RW-2C58-2746

Bulletin has no description...

CVE-2026-2746

creationtimestamp| type| source ---|---|--- 2026-03-04 12:16:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgab6gkioa27...

CVE-2026-2746

SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails...

MiracleLinux 4 : 389-ds-base-1.2.10.2-18.AXS4 (AXSA:2012-589:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-589:02 advisory. 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration...

CVE-2024-2746 affecting package dnf5 for versions less than 5.1.11-2

CVE-2024-2746 affecting package dnf5 for versions less than 5.1.11-2. A patched version of the package is available...

CVE-2025-2746

creationtimestamp| type| source ---|---|--- 2025-03-24 19:40:26+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5db7mv2p 2025-03-24 20:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfoa3a2w 2025-03-24 20:48:54+00:00| seen|...

CVE-2025-2746 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

CVE-2025-2746 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

CVE-2020-2746

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2024-2746

Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugin". All of this happened before Polkit...

CVE-2024-2746 Incomplete fix for CVE-2024-1929

Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemon into loading a user controlled "plugin". All of this happened before Polkit...

RHEL 7 : rh-nginx112-nginx (RHSA-2019:2746)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2746 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

CVE-2019-2746

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5990...

CVE-2023-2746

creationtimestamp| type| source ---|---|--- 2023-07-11 18:29:41+00:00| seen| https://t.me/cibsecurity/66389...

CVE-2023-2746 Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery Attack

The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing CORS settings and, as a result, is vulnerable to a Cross Site Request Forgery CSRF attack. To exploit this vulnerability, a...

SUSE SLES15 Security Update : prometheus-ha_cluster_exporter (SUSE-SU-2023:2746-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2746-1 advisory. - rebuild the package with the go 1.20 security release bsc1208296. Tenable has extracted the preceding description block directly from the...

K03444640: MySQL vulnerabilities CVE-2019-2740, CVE-2019-2741, CVE-2019-2743, CVE-2019-2746, and CVE-2019-2747

Security Advisory Description CVE-2019-2740 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: XML. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2022-2746

creationtimestamp| type| source ---|---|--- 2022-08-11 12:31:53+00:00| seen| https://t.me/cibsecurity/47932...

CVE-2022-2746

CVE-2025-66802 affects Sourcecodester Covid-19 Contact Tracing System 1.0. The connected documents describe an RCE (Remote Code Execution) vulnerability that allows a reverse shell (PHP) into the user’s image, enabling RCE. There is no publicly documented fix/version in these sources; PT-2026-229...