Fedora 43 : openssl (2025-4d34c066a1)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4d34c066a1 advisory. Rebase to OpenSSL 3.5.4, resolving CVE-2025-9230 and CVE-2025-9232 Tenable has extracted the preceding description block directly from the Fedora...

EUVD-2006-2068

Malware in sbrugna...

EUVD-2020-6041

Malware in sbrugna...

EUVD-2020-23926

Malware in sbrugna...

EUVD-2021-21290

Malware in sbrugna...

GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.

...

Linux Distros Unpatched Vulnerability : CVE-2018-11694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged ...

CVE-2025-48163

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support lbg-audio8-html5-radio-ads allows Reflected XSS.This issue affects SHOUT - HTML5 Radio Player With Ads - ShoutCast a...

CVE-2025-48163 WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support allows Reflected XSS. This issue affects SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support: from n...

CVE-2025-48163

CVE-2025-48163 is a Reflected Cross-Site Scripting vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support. Affected versions are up to 3.5.4; the CVSS v3.1 base score is 7.1 (HIGH). The issue arises from improper input neutralization during web page gene...

PT-2025-33921 · Lambertgroup · Lambertgroup Shout - Html5 Radio Player With Ads - Shoutcast/Icecast Support

Name of the Vulnerable Software and Affected Versions: LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support versions through 3.5.4 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site...

Yeelight App 安全漏洞

Yeelight App is an application for controlling smart lighting products from the Chinese company Yeelight. A security vulnerability exists in Yeelight App 3.5.4 and earlier versions, which originates from the file AndroidManifest.xml that causes improper export of Android components...

ProcessMaker 代码问题漏洞

ProcessMaker is a Php-written site builder for business process management BPM and workflow management from ProcessMaker Inc. in the United States. A security vulnerability exists in ProcessMaker versions prior to 3.5.4 that stems from improper handling of plugin uploads, which could lead to remo...

CVE-2024-5036

The Sina Extension for Elementor Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.5.4 due to insufficient input...

CVE-2024-3163

The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack...

CVE-2020-36399

A stored cross site scripting XSS vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "rule1" parameter under the "Bounce Rules" module...

WordPress plugin Easy Property Listings 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Age Gate plugin <= 3.5.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Age Gate versions = 3.5.4...

WordPress plugin Age Gate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WP Pro Real Estate 7 plugin <= 3.5.4 - Authenticated (Seller) Arbitrary File Upload vulnerability

Authenticated Seller Arbitrary File Upload vulnerability discovered by Foxyyy in WordPress Theme Real Estate 7 versions = 3.5.4...