18353 matches found
SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:0325-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0325-1 advisory. This update for kubernetes rebuilds it against the current GO security release. Tenable has extracted the preceding descriptio...
TOTOLINK A7000R Command Injection Vulnerability
TOTOLINK A7000R is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7000R version 4.1cu.4154 contains a command injection vulnerability. This vulnerability arises from incorrect handling of the parameter FileName in the file /cgi-bin/cstecgi.cgi, which may lead to command...
PT-2026-5352
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the onTransact function of IDrmManagerService.cpp allows for a possible out-of-bounds write. This condition can be exploited to achieve...
Malicious Package
Overview @isfe-common/image-minimizer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview admin-upload-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @smt-front/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @afound/common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
📄 Django Summernote 0.8.20.0 Unrestricted File Upload Scanner
This Metasploit Auxiliary Scanner module detects unrestricted file upload vulnerabilities in django-summernote. It targets misconfigurations where image validation depends on the Pillow library and allows non-image files to be uploaded when Pillow is missing. The module safely scans common upload...
CVE-2020-7063
creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...
BELL-CVE-2026-23013
Bulletin has no description...
RHEL 9 : image-builder (RHSA-2026:1377)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1377 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: golang:...
CVE-2026-24804: Loop with Unreachable Exit Condition
Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in coolsnowwolf lede package/lean/mt/drivers/mt7603e/src/mt7603wifi/common modules. This vulnerability is associated with program files bnlib.C. This issue affects lede: through r25.10.1...
The allocate_structures function insufficiently checks bounds before arithmetic multiplication
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocatestructures contains a sizet overflow in sacommon.c. The allocatestructures function insufficiently checks bounds before arithmetic...
gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-24688 via pypdf (4.3.0)
pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-24688 Source advisory: OSV:GHSA-2Q4J-M29V-HQ73...
io.quarkus:quarkus-hibernate-reactive (>=2.2.0.cr1, <=2.4.0.cr1), io.quarkus:quarkus-hibernate-reactive-deployment (>=2.2.0.cr1, <=2.4.0.cr1) +4 more potentially affected by CVE-2025-14969 via org.hibernate.reactive:hibernate-reactive-core (1.0.0.cr9)
org.hibernate.reactive:hibernate-reactive-core MAVEN version 1.0.0.cr9 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate.reactive:hibernate-reactive-core and may be impacted: - io.quarkus:quarkus-hibernate-reactive =2.2.0.cr1, =2.2.0.cr1,...
io.quarkus:quarkus-hibernate-reactive (>=2.5.0.cr1, <=2.6.2.final), io.quarkus:quarkus-hibernate-reactive-deployment (>=2.5.0.cr1, <=2.6.2.final) +4 more potentially affected by CVE-2025-14969 via org.hibernate.reactive:hibernate-reactive-core (1.1.0.final)
org.hibernate.reactive:hibernate-reactive-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate.reactive:hibernate-reactive-core and may be impacted: - io.quarkus:quarkus-hibernate-reactive =2.5.0.cr1, =2.5.0.cr1,...
CVE-2025-59095
The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...
EUVD-2025-206357
The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...
RHEL 8 : poppler (RHSA-2026:1091)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1091 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: Out-of-Bounds Read in...