Istio Sensitive Information Disclosure

When the 'x-envoy-peer-metadata' and/or 'x-envoy-peer-metadata-id' headers are present, they may include data deemed sensitive about the Kubernetes environment. No source data...

WordPress Asgard Security Scanner plugin <= 0.7 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Asgard Security Scanner versions = 0.7...

CVE-2024-12715

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12715

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12715 Asgard Security Scanner <= 0.7 - Reflected XSS

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12715

The CVE-2024-12715 entry concerns the Asgard Security Scanner WordPress plugin (versions up to 0.7) and is supported by connected RH records and index references that describe a Reflected Cross-Site Scripting vulnerability. The vulnerability arises from insufficient sanitization/escaping of a par...

CVE-2024-12715 Asgard Security Scanner <= 0.7 - Reflected XSS

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-1937 · WordPress · Asgard Security Scanner

Name of the Vulnerable Software and Affected Versions: Asgard Security Scanner WordPress plugin versions 0.7 and earlier Description: The issue arises from the plugin not sanitizing and escaping a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. This...

WordPress plugin Asgard Security Scanner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Dell Integrated Remote Access Controller (iDRAC) OS Detection

Binary data dellidracdetect.nbin...

GeoServer < 2.22.5 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.22.5 or 2.23.0 parameter Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Palo Alto PAN-OS GlobalProtect Authentication Bypass

Palo Alto PAN-OS versions 10.2.x 10.2.12 / 11.0.x 11.0.6 / 11.1.x 11.0.5 / 11.2.x 11.2.4 is affected by a vulnerability allowing an attacker to bypass authentication and make administrator requests via a specially forged request. No source data...

Oracle Linux 9 : python-jwcrypto (ELSA-2024-9281)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9281 advisory. 1.5.6-2 - Disable auto-generation of dependencies Related: RHEL-34809 1.5.6-1 - Rebase to version 1.5.6 Resolve: RHEL-34809 Tenable has extracted the preceding...

Apache Tomcat 9.0.0-M1 < 9.0.96 / 9.0.92 < 9.0.96 Multiple Vulnerabilities

Binary data 701495.pasl...

Apache Tomcat < 9.0.97 Vulnerability

Binary data 701492.pasl...

Mastodon < 4.1.8 Multiples Vulnerabilities

According to its self-reported version number, the Mastodon application running on the remote host is prior to 3.5.14 or 4.0.x prior to 4.0.10 or 4.1.x prior to 4.1.8. It is, therefore, affected by multiples vulnerabilities : - A Stored XSS through the translation feature - A Server-side request...

Mastodon 4.1.x < 4.1.2 LDAP injection

According to its self-reported version number, the version of Mastodon running on the remote host is 2.5.0 prior to 3.5.8 or 4.0.x prior to 4.0.4 or 4.1.x prior to 4.1.2. Therefore, it may be affected by a blind LDAP injection in login allows the attacker to leak arbitrary attributes from LDAP...

Mastodon 4.0.x < 4.0.4 LDAP injection

According to its self-reported version number, the version of Mastodon running on the remote host is 2.5.0 prior to 3.5.8 or 4.0.x prior to 4.0.4 or 4.1.x prior to 4.1.2. Therefore, it may be affected by a blind LDAP injection in login allows the attacker to leak arbitrary attributes from LDAP...

Path Relative Stylesheet Import

A Path Relative Style Sheet Import occurs when the application imports a style sheet via a relative URL and uses user input in the file name. This vulnerability mainly affects older browsers such as Internet Explorer and allows an attacker to exploit the way the browser handles stylesheet imports...

SuiteCRM < 7.14.4 / 8.x < 8.6.1 SQL Injection

SuiteCRM versions prior to 7.14.4 and 8.x prior to 8.6.1 has an unauthenticated SQL Injection in events response entry point allowing an attacker to execute SQL queries via a specially forged request. No source data...