14005 matches found
PT-2025-52912
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the coresight ETR Embedded Trace Register component. Specifically, when ETR is enabled in CS MODE SYSFS and the buffer size is...
PT-2025-50033
Name of the Vulnerable Software and Affected Versions WP Hotel Booking versions prior to 2.2.8 Description The WP Hotel Booking plugin for WordPress contains a flaw that allows unauthenticated attackers to retrieve embedded sensitive data. This exposure of sensitive system information to an...
Lexmark Printers Path Traversal (CVE-2018-18894)
Certain older Lexmark devices C, M, X, and 6500e before 2018-12-18 contain a directory traversal vulnerability in the embedded web server. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Lexmark Printers Cross-site Scripting (CVE-2019-19772)
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&lo cale=en&userlocale=ENUS. This plugin only works with Tenable.ot. Please visit...
Lexmark Printers Command Injection (CVE-2021-44735)
Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503880;...
Lexmark Printers Code Injection (CVE-2021-44734)
Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
CVE-2025-43455
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, watchOS 26.1, macOS Tahoe 26.1, visionOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views...
CVE-2025-43455
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views...
CVE-2025-43455
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views...
CVE-2025-43455
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views...
CVE-2025-43455
A privacy issue in the Apple Account component across iOS , iPadOS , watchOS , and visionOS (versions prior to 26.1 ) allows malicious applications to capture screenshots of sensitive information within embedded views. The vulnerability stems from insufficient privacy checks and isolation policie...
PT-2025-49093
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an invalid memory access can occur in the cros ec keyb process function when receiving an EC MKBP EVENT KEY MATRIX event. This happens if cros ec...
CVE-2021-47698
Nagios XI versions prior to 5.8.7 using embedded Nagios Core are vulnerable to cross-site scripting XSS via the Core UI’s Views URL handling escapestring. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...
CVE-2021-47698
Summary: CVE-2021-47698 affects Nagios XI versions prior to 5.8.7 that embed Nagios Core. The vulnerability is a cross-site scripting (XSS) flaw in the Core UI Views URL handling (escape_string()), caused by insufficient validation/escaping of user-supplied input. Impact per sources: could allow ...
PT-2025-44887
Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 visionOS versions prior to 26.1 Description A privacy issue existed where a malicious application could potentially capture screenshots of sensitive...
About the security content of iOS 26.1 and iPadOS 26.1
About the security content of iOS 26.1 and iPadOS 26.1 This document describes the security content of iOS 26.1 and iPadOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
CVE-2025-64351
Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank Math SEO: from n/a through = 1.0.252.1...
CVE-2025-60749
DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchupwebhelper.exe...
CVE-2025-64351
Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank Math SEO: from n/a through = 1.0.252.1...