270209 matches found
The vulnerability of the sneeit_articles_pagination_callback() function in the Sneeit Framework, a content management system for WordPress, allows a hacker to execute arbitrary code.
The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Photon OS 5.0: Libwebp PHSA-2023-5.0-91-0097
An update of the libwebp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Cups PHSA-2025-5.0-91-0436
An update of the cups package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0436. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Linux PHSA-2026-5.0-91-0888
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0888. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-69885
Name of the Vulnerable Software and Affected Versions use-reducer-async affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which executed remote attacker-controlled code on developer workstations during the npm install process...
PT-2026-69893
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file format plugins, specifically those handling PSD and PAA files. A remote attacker can exploit this by tricking a user into opening a specially crafted image file, which...
PT-2026-69996
Name of the Vulnerable Software and Affected Versions react18-use affected versions not specified Description react18-use, a React 19 use hook shim, contained malicious commits in its default branch between 2026-05-19 01:07:01 and 2026-05-19 15:20:43. The issue involves the addition of...
The vulnerability of the TrueConf Server software, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the TrueConf Server software lies in the lack of authentication for critical functions, allowing attackers to execute arbitrary scripts and increase their privileges.
The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...
Photon OS 5.0: Postgresql13 PHSA-2025-5.0-91-0490
An update of the postgresql13 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0490. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-69961
Name of the Vulnerable Software and Affected Versions Feast affected versions not specified feast-operator affected versions not specified Description Feast and feast-operator use a default configuration of "no auth", which means no security manager is installed. This allows unauthenticated and...
Photon OS 5.0: Dnsmasq PHSA-2026-5.0-91-0866
An update of the dnsmasq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0866. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Vulnerability of the prepare_form() function in the acfe_module_form_front.render plugin: This vulnerability allows a hacker to execute arbitrary code.
Vulnerability of the prepareform function in the acfemoduleformfront.render method of the Advanced Custom Fields plugin: This vulnerability is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Photon OS 5.0: Chromium PHSA-2023-5.0-91-0081
An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0081. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Lasso PHSA-2025-5.0-91-0674
An update of the lasso package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0674. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Samba PHSA-2023-5.0-91-0160
An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libuv PHSA-2024-5.0-91-0213
An update of the libuv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
The vulnerabilities of Firefox browsers, Firefox ESR, and Thunderbird email clients, Thunderbird ESR, are related to the execution of operations outside of the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability in browsers Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...