75 matches found
CVE-2026-47767 Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...
OESA-2026-2218 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. MultiPartParser allows remote attackers to degrade performance by submitting multipart uploads wi...
RHCOS 4 : OpenShift Container Platform 4.5.41 (RHSA-2021:2431)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2431 advisory. - jetty: local temporary directory hijacking vulnerability CVE-2020-27216 - jetty: buffer not correctly recycled in Gzip Request...
SUSE-SU-2026:20506-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum bsc1253473. - CVE-2025-40186: tcp: Don't call reqskfastopenremove in tcpconnrequest...
CVE-2020-10574
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "querylogger" Admin API request, because of a typo in the JSON validation...
Mozilla Firefox ESR < 17.0.7
The version of Firefox ESR installed on the remote Windows host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory. - Do not send data XHR HEAD requestCVE-2013-1692 CVE-2013-1692 Note that Nessus has not tested for this issue but has instea...
EUVD-2020-7335
Malware in sbrugna...
EUVD-2021-23729
Malware in sbrugna...
EUVD-2018-8182
Malware in sbrugna...
EUVD-2018-3300
Malware in sbrugna...
EUVD-2021-12560
Malware in sbrugna...
EUVD-2013-6458
Malware in sbrugna...
RockyLinux 10 : git-lfs (RLSA-2025:9063)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9063 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly...
EUVD-2023-34240
Malicious code in bioql PyPI...
EUVD-2024-43810
Malicious code in bioql PyPI...
EUVD-2025-7120
Malicious code in bioql PyPI...
EUVD-2024-39644
Malicious code in bioql PyPI...
EUVD-2024-0352
Malicious code in bioql PyPI...