1162924 matches found
ROS-20260901-73-0014
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...
RHEL 10 : golang (RHSA-2026:61882)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61882 advisory. The golang packages provide the Go programming language compiler. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Servi...
MiracleLinux 8 : go-toolset:rhel8 (AXSA:2026-1726:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1726:01 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Deni...
openSUSE 16 Security Update : go1.26-openssl (openSUSE-SU-2026:21705-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21705-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: -...
TencentOS Server 4: grafana (TSSA-2026:0947)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0947 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 4: grafana-pcp (TSSA-2026:0946)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0946 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-82221
Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...
CVE-2026-82224
Unauthenticated Cross Site Scripting XSS in SliceWP = 1.2.10 versions...
CVE-2026-82229
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...
CVE-2026-81764
Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...
CVE-2026-81768
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81778
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
CVE-2026-81765
Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...
CVE-2026-81298
Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...
CVE-2026-81291
Unauthenticated Cross Site Scripting XSS in Uncode = 2.12.7 versions...
CVE-2026-81290
Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...
CVE-2025-63607
TechStore 1.0 is vulnerable to Cross Site Scripting XSS. In contactdisplay, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser...
CVE-2026-82229 WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...
CVE-2026-82229 WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...
