49 matches found
Fedora 43 : python3.15 (2026-e2ada1fa1e)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e2ada1fa1e advisory. New prerelease of Python 3.15, containing fixes to a few CVEs. Tenable has extracted the preceding description block directly from the Fedora securi...
Fedora 43 : python3.14 (2026-97a8eb204a)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-97a8eb204a advisory. Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Tenable has extracted the preceding description block directly from th...
python315-3.15.0~a8-3.1 on GA media (moderate)
python315-3.15.0a8-3.1 on GA media Announcement ID: openSUSE-SU-2026:10648-1 Rating: moderate Cross-References: CVE-2026-1502 CVE-2026-4786 CVE-2026-5713 CVE-2026-6019 CVE-2026-6100 CVSS scores: CVE-2026-1502 SUSE : 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVE-2026-1502 SUSE : 5.7...
Fedora 42 : python3.14 (2026-1fd21102d1)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1fd21102d1 advisory. Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 ---- New minor version of the alternate Python interpreter Tenable has...
Fedora 45 : python3.14 (2026-382df0cfce)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-382df0cfce advisory. Automatic update for python3.14-3.14.4-2.fc45. Changelog Thu Apr 16 2026 Charalampos Stratakis - 3.14.4-2 - Security fixes for CVE-2026-1502,...
CVE-2026-5713
creationtimestamp| type| source ---|---|--- 2026-04-15 13:55:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cpb2wg2r 2026-04-15 16:10:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjkbudr45z2t 2026-05-23 17:02:43+00:00| seen|...
CVE-2026-5713
The CVE-2026-5713 entry covers a vulnerability in Python related to the profiling.sampling module (Python 3.15+) and asyncio introspection capabilities (3.14+). The issue enables out-of-bounds read/write in a privileged process when that process is connected to a malicious or infected Python proc...
CVE-2025-5713
A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown functionality of the file /fluxos-dashboard of the component Flow Handler. The manipulation of the argument Descrição da solicitação leads to cross site...
CVE-2025-5713 SoluçõesCoop iSoluçõesWEB Flow fluxos-dashboard cross site scripting
A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown functionality of the file /fluxos-dashboard of the component Flow Handler. The manipulation of the argument Descrição da solicitação leads to cross site...
CVE-2025-5713
The CVE-2025-5713 entry concerns SoluçõesCoop iSoluçõesWEB (up to 20250519) with a vulnerability in the Flow Handler’s file /fluxos-dashboard. The issue arises from manipulation of the Descrição da solicitação parameter, enabling cross-site scripting (XSS). It is described as remotely attackable ...
CVE-2025-5713 SoluçõesCoop iSoluçõesWEB Flow fluxos-dashboard cross site scripting
A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown functionality of the file /fluxos-dashboard of the component Flow Handler. The manipulation of the argument Descrição da solicitação leads to cross site...
CVE-2018-5713
In Malwarefox Anti-Malware 2.72.169, the driver file zam64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010...
WordPress If-So Dynamic Content Personalization Plugin < 1.8.0.4 is vulnerable to Cross Site Scripting (XSS)
Software If-So Dynamic Content Personalization Type Plugin Vulnerable versions 1.8.0.4 Fixed in 1.8.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5713 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f3d046f23273...
CVE-2024-5713
creationtimestamp| type| source ---|---|--- 2024-07-13 08:49:30+00:00| seen| https://t.me/cvedetector/796...
CVE-2024-5713
The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
CVE-2024-5713 if-so < 1.8.0.4 - Reflected XSS
The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
CVE-2024-5713 if-so < 1.8.0.4 - Reflected XSS
The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
CVE-2023-5713
creationtimestamp| type| source ---|---|--- 2023-12-30 10:06:35+00:00| seen| https://t.me/ctinow/160836...
CVE-2023-5713 System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sdoptionvalue function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2023-5713
CVE-2023-5713 concerns the WordPress System Dashboard plugin (versions ≤ 2.8.7). The vulnerability stems from a missing capability check in the sd_option_value() AJAX handler, allowing authenticated users with subscriber-level access and above to obtain potentially sensitive option values and des...