CVE-2026-42211

React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution RCE through external requests. This attack requires the application code to have an existing prototype pollution...

Fedora 42 : keylime / keylime-agent-rust (2026-c2b5451b35)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-c2b5451b35 advisory. Update keylime to version 7.14.1 and keylime-agent-rust to version 0.2.9 Fixes: CVE-2026-1709 and CVE-2025-13609 Tenable has extracted the preceding...

EUVD-2023-57666

Malicious code in bioql PyPI...

EUVD-2023-57667

Malicious code in bioql PyPI...

CVE-2023-23880

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ExactMetrics plugin = 7.14.1 versions...

CVE-2023-5350

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5351

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

PT-2023-32065 · Salesagility · Salesagility/Suitecrm

Name of the Vulnerable Software and Affected Versions: salesagility/suitecrm versions prior to 7.14.1 Description: The issue is related to improper access control in the salesagility/suitecrm GitHub repository. Recommendations: For versions prior to 7.14.1, update to version 7.14.1 or later to...

PT-2023-32063 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...

CVE-2023-23880

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ExactMetrics plugin = 7.14.1 versions...

Kibana 7.9.0 < 7.14.1 Path Traversal

According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...