CVE-2024-38063-

CVE-2024-38063- Remotely Exploiting The Kernel Via IPv6 CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Marcus Hutchins Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A...

CVE-2026-83299

Oracle Business Intelligence Enterprise Edition (Oracle Analytics), component Analytics Web General , version 12.2.1.4.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in full takeover (...

Linux Distros Unpatched Vulnerability : CVE-2026-46352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

Fedora 44 : postgresql16-anonymizer (2026-1b05b6dad1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1b05b6dad1 advisory. Update to 3.1.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

vulnerabilities present in Microsoft Office

Microsoft has identified vulnerabilities in various Office products. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause damage as described in the following table. For successful exploitation, the malicious individual must deceive the victim into opening ...

postgresql17-17.11-1.1 on GA media (moderate)

postgresql17-17.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11555-1 Rating: moderate Cross-References: CVE-2026-14662 CVE-2026-14663 CVE-2026-14664 CVE-2026-14666 CVE-2026-14668 CVE-2026-14669 CVE-2026-14670 CVE-2026-14671 CVE-2026-14672 CVE-2026-14677 CVE-2026-14678 CVE-2026-14679...

GLSA-202608-19 : quickjs-ng: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-19 quickjs-ng: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in quickjs-ng. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

Vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher

Oracle has identified several vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher. These vulnerabilities exist in various versions of Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 and Oracle BI Publisher...

CVE-2026-70874

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60970

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromis...

Intel® Xeon® 6 Processor Firmware Advisory

Summary: A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31936 Description:...

WordPress StoreKeeper for WooCommerce Plugin <= 14.4.4 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by theviper17 in WordPress Plugin StoreKeeper for WooCommerce versions = 14.4.4...

WordPress ONLYOFFICE Docs plugin 1.1.0-2.2.0 - Missing Authorization to Unauthenticated Privilege Escalation via callback Function

Missing Authorization to Unauthenticated Privilege Escalation via callback Function vulnerability discovered by kr0d in WordPress Plugin ONLYOFFICE versions 1.1.0-2.2.0...

Unauthorized Access to AMD Secure Processor’s Crypto-Co-Processor

CVE Details Refer to Glossary for explanation of terms CVE| CVSS Score| CVE Description ---|---|--- CVE-2023-20599| 7.9 High CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N| Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto...

WordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin elfsight Contact Form widget versions = 2.3.1...

WordPress Majestic Support plugin <= 1.1.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by LVT-tholv2k in WordPress Plugin Majestic Support versions = 1.1.0...

Mozilla Firefox Security Advisory (MFSA2025-28) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-28. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

WordPress Flynax Bridge plugin <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update vulnerability

Unauthenticated Privilege Escalation via Password Update vulnerability discovered by kr0d in WordPress Plugin Flynax Bridge versions = 2.2.0...

WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin FoodBakery versions = 3.3...

WordPress WpBookingly plugin <= 1.3.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin WpBookingly versions = 1.3.0...