1423 matches found
Photon OS 5.0: Git PHSA-2025-5.0-91-0555
An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0555. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Postgresql13 PHSA-2025-5.0-91-0597
An update of the postgresql13 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0597. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Gdb PHSA-2025-5.0-91-0648
An update of the gdb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0648. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libtiff PHSA-2024-5.0-91-0196
An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0196. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Xinetd PHSA-2023-5.0-91-0060
An update of the xinetd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0060. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Nghttp2 PHSA-2023-5.0-91-0126
An update of the nghttp2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0126. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Registry. The manipulation leads to os command injection. The attack can only be performed from a local environment. The exploi...
CVE-2026-16214 geex-arts django-jet Dashboard views.py authorization
A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module. Such manipulation leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and...
Oracle Linux 10 : libpng (ELSA-2026-28233)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-28233 advisory. - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161329 Tenable has extracted the preceding description...
MindsDB has an Improper Access Control Issue
A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byomhandler/procwrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit ha...
EUVD-2026-43202
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function starthttpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument devicename leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is...
CVE-2026-15473
A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Recorded Calls Page. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. T...
CVE-2026-15318
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Channel Handler. This manipulation of the argument clientid causes incorrect authorization. The attack is possible to be...
CVE-2026-14749 mjperpinosa stumasy calculate.php eval code injection
A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imbacalculator/calculate.php. The manipulation of the argument mathematicalsentence leads to code injection. The attack is possible to ...
CVE-2026-11484
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /archive3.php. This manipulation of the argument sy causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public an...
PT-2026-47262
Name of the Vulnerable Software and Affected Versions Weaviate versions prior to 1.38.0-rc.0 Description An issue exists in the Static API Key Handler component within the validateConfig function of the usecases/auth/authentication/apikey/client.go file. Manipulation of the StaticApiKey argument...
Fedora 44 : nextcloud (2026-30881a5be7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30881a5be7 advisory. 33.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora 43 : nextcloud (2026-e187104307)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e187104307 advisory. 33.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...