34673 matches found
Oracle Linux 7 : evince (ELSA-2026-41904)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41904 advisory. 3.28.2-10.0.1 - Fix CVE-2026-46529 Orabug: 39757172 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...
Oracle Linux 7 : libarchive (ELSA-2026-8517)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8517 advisory. - Fix CVE-2026-4424 CVE-2026-5121 Orabug: 39219508 Tenable has extracted the preceding description block directly from the Oracle Linux security...
CLSA-2026-1786348544 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.27-tuxcare.7...
Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2026-47176)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47176 advisory. - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 Tenable has extracted the preceding description block directly from the Oracle...
Oracle Linux 7 : ruby (ELSA-2026-37397)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37397 advisory. 2.0.0.648-39.0.1 - Fix CVE-2026-42246 and CVE-2026-42258 Orabug: 39711420 Tenable has extracted the preceding description block directly from the Orac...
Oracle Linux 7 : libpng12 (ELSA-2026-43702)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-43702 advisory. - Fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE Orabug: 39771480 Tenable has extracted the preceding description block...
Oracle Linux 7 : sudo (ELSA-2026-13895)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-13895 advisory. - Security update for CVE-2026-35535 Orabug: 39320917 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
RHEL 7 : python3 (RHSA-2026:52400)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:52400 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
EUVD-2026-54365
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' attributes in all versions up to, and including, 3.5.43 due to insufficient input sanitization and output escaping. This makes it possible f...
CVE-2026-12801: Improper Neutralization of Input During Web Page Generation
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' attributes in all versions up to, and including, 3.5.43 due to insufficient input sanitization and output escaping. This makes it possible f...
PT-2026-68851
Name of the Vulnerable Software and Affected Versions Ultra Addons for Contact Form 7 versions prior to 3.5.44 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject...
PT-2026-68986
Impact The default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients Patches This has been fixed in 5.74.3 and 6.24.2...
CLSA-2026-1785921094 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.7.12-tuxcare.7...
PT-2026-75887
TuxCare rebuilt 23 org.springframework packages to address 7 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.7...
CVE-2026-5116: Improper Neutralization of Input During Web Page Generation
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...
PT-2026-76206
7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...
RHEL 7 : libpng (RHSA-2026:50808)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50808 advisory. The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics PNG image format files. Security Fixes:...
PT-2026-68020
Name of the Vulnerable Software and Affected Versions Contact Form 7 – Dynamic Text Extension versions prior to 5.0.6 Description Stored Cross-Site Scripting occurs due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...