4043 matches found
Cohesity TranZman 安全漏洞
Cohesity TranZman is a data migration and recovery software developed by Cohesity Corporation. Version 4.0 Build 14614 of Cohesity TranZman contains a security vulnerability. This vulnerability stems from the use of weak encryption algorithms for data encryption, which may allow attackers to easi...
Photon OS 4.0: Vim PHSA-2026-4.0-0968
An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0968. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid30011...
Photon OS 4.0: Linux PHSA-2026-4.0-0968
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0968. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Critical Photon OS Security Update - PHSA-2026-4.0-0968
Updates of 'go', 'linux', 'vim' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-4.0-0966
Updates of 'libpng' packages of Photon OS have been released...
WordPress MP3 Audio Player 4.0-5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure vulnerability discovered by kr0d in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions 4.0-5.10...
WordPress plugin MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...
Photon OS 4.0: Openjdk21 PHSA-2026-4.0-0961
An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0961. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Important Photon OS Security Update - PHSA-2026-4.0-0961
Updates of 'openjdk21', 'openjdk11' packages of Photon OS have been released...
CVE-2019-25316
GOautodial 4.0 contains a persistent cross-site scripting vulnerability exposed via the event title parameter. The flaw affects the CreateEvent.php endpoint, where authenticated attackers can send crafted POST requests with XSS payloads to execute arbitrary JavaScript in victims’ browsers. The CV...
Photon OS 4.0: Linux PHSA-2026-4.0-0960
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Imagemagick PHSA-2026-4.0-0959
An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-7145
Name of the Vulnerable Software and Affected Versions Craft versions 4.0.0-RC1 through 4.16.17 Craft versions 5.0.0-RC1 through 5.8.21 Description Craft is a platform for creating digital experiences. The element-indexes/get-elements API endpoint is susceptible to SQL Injection via the...
Photon OS 4.0: Expat PHSA-2026-4.0-0956
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0956. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Nodejs PHSA-2026-4.0-0956
An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0956. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2026-4.0-0952
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0952. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Python3 PHSA-2026-4.0-0954
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0954. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-23794
Reflected XSS in Apache Syncope's Enduser Login page. An attacker that tricks a legitimate user into clicking a malicious link and logging in to Syncope Enduser could steal that user's credentials. This issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3. Users are...