32078 matches found
HSC MailInspector 跨站脚本漏洞
HSC MailInspector is a mail security analysis and filtering system developed by the Brazilian company HSC. Version 5.3.3-7 of HSC MailInspector contains a cross-site scripting vulnerability. This vulnerability arises from the use of alternative or obfuscated JavaScript syntax in user inputs withi...
HSC MailInspector 跨站脚本漏洞
HSC MailInspector is a mail security analysis and filtering system developed by the Brazilian company HSC. Version 5.3.3-7 of HSC MailInspector contains a cross-site scripting vulnerability. This vulnerability arises from the use of alternative or obfuscated JavaScript syntax in user-controlled...
Oracle Linux 7 : vim (ELSA-2026-6617)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-6617 advisory. - Security update CVE-2026-25749 CVE-2026-28417 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
CVE-2026-44437
The Angular SSR is a server-rise rendering tool for Angular applications. From 19.0.0-next.0 to before 19.2.25, 20.3.25, 21.2.9, and 22.0.0-next.7, a vulnerability exists in the X-Forwarded-Prefix header processing logic within Angular SSR. The internal validation mechanism fails to properly...
CVE-2026-6709 Coinbase Commerce for Contact Form 7 <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via 'cccf7_api_key' Parameter
The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2. This is due to a missing capability check and missing nonce verification in the savesettings function, which is registered on the adminpostcccf7savesettings...
CLSA-2025-1742929277 Update of shim-signed
Add support for oraclelinux7...
CVE-2026-0965 affecting package libssh for versions less than 0.10.6-7
CVE-2026-0965 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...
CVE-2026-0964 affecting package libssh for versions less than 0.10.6-7
CVE-2026-0964 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...
CVE-2026-0967 affecting package libssh for versions less than 0.10.6-7
CVE-2026-0967 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...
CVE-2026-39836
creationtimestamp| type| source ---|---|--- 2026-05-07 22:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7s2lbje2v 2026-05-08 12:01:27+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoo2vosj2d 2026-05-15 16:19:42+00:00| seen|...
CVE-2026-44263
creationtimestamp| type| source ---|---|--- 2026-05-07 17:40:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbr5wilyq2n...
CVE-2026-41484
creationtimestamp| type| source ---|---|--- 2026-05-07 02:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla6u4p7om2i...
CVE-2026-7925
creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260508...
Oracle Linux 7 : python (ELSA-2026-9614)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-9614 advisory. 2.7.5-94.0.7 - Fix for CVE-2026-4519 Orabug: 39243798 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...
PT-2026-36894
Conditional Fields for Contact Form 7 WordPress plugin through version 2.6.7 contains an uncontrolled resource consumption vulnerability in the Wpcf7cfMailParser class where the hide hidden mail fields regex callback method reads an iteration count directly from user-supplied POST parameters...
WordPress WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms plugin <= 1.7.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin CF7 WOW Styler versions = 1.7.0...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: krb5: krb5-devel-1.22.2-7.hum1 aarch64, x8664 krb5-libs-1.22.2-7.hum1 aarch64, x8664 krb5-pkinit-1.22.2-7.hum1 aarch64, x8664 krb5-server-1.22.2-7.hum1 aarch64, x8664 krb5-server-ldap-1.22.2-7.hu...
CLSA-2025-1742376604 Update of shim-signed
Add support for oraclelinux7...