50682 matches found
WordPress Defender Security plugin < 6.2.0 - Admin+ Network-Wide RCE vulnerability
Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Defender Security versions 6.2.0...
MINI-R7H4-9F9G-CPWR
Bulletin has no description...
ECHO-3B00-F8EA-BEA7
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-77117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may...
GLSA-202608-30 : OpenRGB: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202608-30 OpenRGB: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenRGB. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
GitLab 18.3 < 19.1.7 / 19.2 < 19.2.5 / 19.3 < 19.3.1 (CVE-2026-4398)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-4398 Note that Nessus has not tested for this issue but has instead relied only on the application'...
Fedora 43 : openssh (2026-535a408db5)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-535a408db5 advisory. Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded Tenable has extracted the preceding description block directly from the Fedora...
UBUNTU-CVE-2026-19499
Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...
Security Bulletin: QRadar contains hard-coded credentials
Summary QRadar contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Vulnerability Details CVEID:CVE-2026-5522 DESCRIPTION: QRadar contains hard-cod...
ECHO-A444-0F4D-8828
Bulletin has no description...
ECHO-3578-294C-0A76
Bulletin has no description...
ECHO-0DD1-CA9D-47D8
Bulletin has no description...
ECHO-85E9-38AD-2E65
Bulletin has no description...
ECHO-783D-6044-7A42
Bulletin has no description...
ECHO-23E1-716C-4127
Bulletin has no description...
ECHO-7F8F-7DFB-99F9
Bulletin has no description...
ECHO-EDF5-B30F-F723
Bulletin has no description...
ECHO-148C-6978-5A57
Bulletin has no description...