9707 matches found
[SECURITY] Fedora 45 Update: mingw-gstreamer1-plugins-bad-free-1.28.7-1.fc45
GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...
Linux Distros Unpatched Vulnerability : CVE-2026-100696
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver...
CVE-2021-43798
CVE-2021-43798 Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions iss vulnerable to directory traversal, allowing access to local files Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions i...
DEBIAN-CVE-2026-100696
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
CVE-2026-100696
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
CVE-2026-100696
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
UBUNTU-CVE-2026-100696
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
CVE-2026-100696 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
CVE-2026-100696 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
CVE-2026-100696 Adminer before 6.0.2 Unauthenticated SSRF via Elasticsearch Driver
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
EUVD-2026-87669
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...
CVE-2026-100582
OpenClaw channel plugins @openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and related metadata read actions. A lower-tru...
EUVD-2026-87469
OpenClaw channel plugins @openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and related metadata read actions. A lower-tru...
CVE-2026-100582 OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass
OpenClaw channel plugins @openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and related metadata read actions. A lower-tru...
CVE-2026-100582
OpenClaw channel plugins (@openclaw/msteams , @openclaw/feishu , @openclaw/matrix , and @openclaw/googlechat ) versions prior to 2026.8.1 fail to enforce configured channel read allowlists for caller-supplied explicit read targets. This flaw affects actions involving messages, reactions, pins, me...
PT-2026-99367
Name of the Vulnerable Software and Affected Versions Adminer versions 4.16.0 through 6.0.1 Description A pre-authentication Server-Side Request Forgery SSRF exists in the optional Elasticsearch driver located at plugins/drivers/elastic.php. The issue occurs because adminer/include/auth.inc.php...
Fedora 45 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-0d2736f2fe)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-0d2736f2fe advisory. Update to gstreamer-1.28.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-d5e9ea2b8c)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-d5e9ea2b8c advisory. Update to gstreamer-1.28.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Memory Allocation with Excessive Size Value
Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value due to improper handling of type size and count in the AMQP 0-8/0-9/0-9-1 decoder. ...
Session Fixation
Overview Affected versions of this package are vulnerable to Session Fixation through the reuse of a session identifier retained across successful authentication. An attacker can gain unauthorized access to an authenticated management session by exploiting the lack of HTTP session renewal after...