104 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-45031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check ...
Fedora 44 : pdns-recursor (2026-db1ef256e0)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-db1ef256e0 advisory. Update to latest upstream Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
CVE-2026-1453
CVE-2026-1453 affects the KiloView Encoder Series. The issue is a missing authentication for a critical function that allows an unauthenticated attacker to create or delete administrator accounts, granting full administrative control over the product. Public sources (NVD/Red Hat/CISA/EUVD/PT-Secu...
MiracleLinux 7 : tomcat-7.0.76-11.el7 (AXSA:2020-4508:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4508:01 advisory. tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability CVE-2020-1938 Tenable has extracted the preceding description block directly from the MiracleLinu...
PT-2025-49312
🔔 NEW CVE ALERT: CVE-2025-66536 is a high-risk vulnerability CVSS v3: 9.1 with limited details available. Remote exploitation & major impact possible. Cyber pros, stay alert! Monitor updates, patch, & prepare. 🛡️ Cybersecurity CVEAlert https://t.co/eMhym5axa9...
WordPress WooCommerce Designer Pro plugin <= 1.9.26 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Tonn in WordPress Plugin WooCommerce Designer Pro versions = 1.9.26...
CVE-2025-6978
Diagnostics command injection vulnerability...
EUVD-2005-0418
Malware in sbrugna...
WordPress Credit Card Experience Theme <= 1.2.15 is vulnerable to Local File Inclusion
Software Credit Card Experience Type Theme Vulnerable versions = 1.2.15 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 660aaadb7556 Credits Tran Nguyen Bao Khanh VCI - VNPT...
Fedora 43 : jupyterlab / python-notebook (2025-7472c8fb5c)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-7472c8fb5c advisory. New jupyterlab and notebook Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
WordPress Inset Theme <= 1.18.0 is vulnerable to Local File Inclusion
Software Inset Type Theme Vulnerable versions = 1.18.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 2b36ab61c62f Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...
CVE-2019-3002
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
PT-2025-16470 · Oracle · Oracle Smart View For Office
Name of the Vulnerable Software and Affected Versions: Oracle Smart View for Office version 24.200 Description: The issue allows a high privileged attacker with network access via HTTP to compromise Oracle Smart View for Office. Successful attacks require human interaction from a person other tha...
Advisory ROSA-SA-2025-2835
Software: bind-dyndb-ldap 11.6 OS: ROSA Virtualization 2.1 packageevrstring: bind-dyndb-ldap-11.6-5.rv3 CVE-ID: CVE-2023-50387 BDU-ID: 2024-01359 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the DNSSEC component of the DNS protocol implementation of the DNS server BIND is related to the algorithm...
Fedora 40 : chromium (2025-eeba8bf9d8)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-eeba8bf9d8 advisory. Update to chromium-133.0.6943.141 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 41 : java-11-openjdk (2025-e6f20785e3)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e6f20785e3 advisory. January CPU 2025 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Fedora 41 : java-21-openjdk (2025-9f92cbc27f)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9f92cbc27f advisory. January CPU 2025 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
PT-2025-1193
Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions prior to the fixed version Description The vulnerability is a zero-click remote code execution RCE flaw in Microsoft Outlook, caused by a memory corruption issue in the UtOlePresStmToContentsStm function of the...
Fedora 41 : seamonkey (2024-90f1d7e116)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-90f1d7e116 advisory. Update to 2.53.19 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Fedora 37 : cacti / cacti-spine (2022-b2be5ddbb8)
The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-b2be5ddbb8 advisory. - Update to 1.2.22 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...