58982 matches found
GHSA-H773-7GF7-9M2X vulnerabilities
Vulnerabilities for packages: neuvector-scanner...
GHSA-C8G6-QRWH-M3VP vulnerabilities
Vulnerabilities for packages: neuvector-scanner...
GHSA-H773-7GF7-9M2X vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...
GHSA-C8G6-QRWH-M3VP vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...
CVE-2025-54469 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...
CVE-2025-54471 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...
CVE-2025-12136
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.2.4. This is due to insufficient validation on the user-supplied URL in the '/scanner/scan-without-login' REST API endpoint. This makes ...
CVE-2025-12136
CVE-2025-12136 affects the WordPress plugin “Real Cookie Banner: GDPR & ePrivacy Cookie Consent”. Wordfence and related sources describe a Server-Side Request Forgery (SSRF) vulnerability in all versions up to and including 5.2.4, caused by insufficient validation of the user-supplied URL in the ...
CVE-2025-12136 Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.2.4 - Authenticated (Admin+) Server-Side Request Forgery via scan-without-login Endpoint
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.2.4. This is due to insufficient validation on the user-supplied URL in the '/scanner/scan-without-login' REST API endpoint. This makes ...
Photon OS 5.0: Linux PHSA-2025-5.0-0655
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0655. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Atlassian Jira 9.12.x < 9.12.28 Path Traversal
According to its self-reported version number, the Atlassian Jira application running on the remote host is 9.12.x prior to 9.12.28, 10.3.x prior to 10.3.12 or 11.x prior to 11.1.0. It is, therefore, affected by a path traversal vulnerability. Note that the scanner has not tested for these issues...
Rapid7 Velociraptor Installed (Linux)
Binary data rapid7velociraptornixinstalled.nbin...
MCP JSON Config Detected (Windows)
Binary data mcpjsonconfigdetectedwin.nbin...
GHSA-25QH-J22F-PWP8 vulnerabilities
Vulnerabilities for packages: dependency-track, cassandra, akhq, nextflow, kserve-modelmesh, management-api-for-apache-cassandra-5.0, cassandra-reaper, apache-nifi-registry, sonar-scanner-cli, thingsboard, zookeeper, apache-nifi, trino, keycloak-config-cli...
CVE-2025-11226 vulnerabilities
Vulnerabilities for packages: dependency-track, cassandra, akhq, nextflow, kserve-modelmesh, management-api-for-apache-cassandra-5.0, cassandra-reaper, apache-nifi-registry, sonar-scanner-cli, thingsboard, zookeeper, apache-nifi, trino, keycloak-config-cli...
CVE-2025-11226 vulnerabilities
Vulnerabilities for packages: knative-kafka-broker, cassandra-fips, ontop-fips, cassandra-reaper, kayenta, apache-nifi-registry, keycloak-config-cli, akhq, apache-nifi, management-api-for-apache-cassandra-4.0, zookeeper, nacos, nextflow, kserve-modelmesh, sonar-scanner-cli, localstack,...
GHSA-25QH-J22F-PWP8 vulnerabilities
Vulnerabilities for packages: knative-kafka-broker, cassandra-fips, ontop-fips, cassandra-reaper, kayenta, apache-nifi-registry, keycloak-config-cli, akhq, apache-nifi, management-api-for-apache-cassandra-4.0, zookeeper, nacos, nextflow, kserve-modelmesh, sonar-scanner-cli, localstack,...
Photon OS 4.0: Perl PHSA-2025-4.0-0890
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0890. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Bytecode-Centric Detection of Known-To-Be-Vulnerable Dependencies in Java Projects
On average, 71% of the code in typical Java projects comes from open-source software OSS dependencies, making OSS dependencies the dominant component of modern software code bases. This high degree of OSS reliance comes with a considerable security risk of adding known security vulnerabilities to...