Oracle Linux 8 : maven:3.8 (ELSA-2026-40841)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40841 advisory. - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165339 Tenable has extracted the preceding description block directly from the...

AlmaLinux 8 : maven:3.8 (ALSA-2026:40841)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:40841 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

RHEL 8 : maven:3.8 (RHSA-2026:40841)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:40841 advisory. Maven is a software project management and comprehension tool. Based on the concept of a project object model POM, Maven can manage a project's buil...

RockyLinux 8 : maven:3.8 (RLSA-2026:40841)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:40841 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

CVE-2026-40841

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:17+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:08+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2025-40841

creationtimestamp| type| source ---|---|--- 2026-03-25 14:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvdscayn52z...

MAL-2025-40841 Malicious code in zenith-oiv1a-xxwg6-iris-project (npm)

The package zenith-oiv1a-xxwg6-iris-project was found to contain malicious code...

CVE-2024-40841

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Processing a maliciously crafted video file may lead to unexpected app termination...

CVE-2023-40841

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "addwhitenode,"...

CVE-2022-40841

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

macOS 14.x < 14.7 Multiple Vulnerabilities (121247)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18,...

CVE-2023-40841

Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "addwhitenode,"...

CVE-2023-40841

The CVE-2023-40841 entry concerns Tenda AC6 firmware (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The vulnerability is a Buffer Overflow in the add_white_node function, caused by insufficient input length validation. Reported impact is high – potential remote execution of code or a denial of servi...

CVE-2022-40841

creationtimestamp| type| source ---|---|--- 2022-12-21 20:12:49+00:00| seen| https://t.me/cibsecurity/55059...

CVE-2022-40841

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

CVE-2022-40841

CVE-2022-40841 describes a cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0. The issue arises from crafting payloads injected into the htmlNodes parameter, allowing attackers to execute arbitrary web scripts or HTML in victims’ browsers. CVSS v3.1 base score is 6....

CVE-2021-40841

creationtimestamp| type| source ---|---|--- 2022-02-19 00:38:25+00:00| seen| https://t.me/cibsecurity/37792...

CVE-2021-40841

A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the underlying server...

CVE-2021-40841

CVE-2021-40841 concerns LiveConfig 2.12.2, presenting a Path Traversal vulnerability in a log file that allows authenticated attackers to read files on the underlying server. The available connected documents confirm the affected software and the nature of the vulnerability but do not provide exp...