Linux Distros Unpatched Vulnerability : CVE-2022-28658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing CVE-2022-28658 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2023-31907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

Linux Distros Unpatched Vulnerability : CVE-2024-0048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This...

Linux Distros Unpatched Vulnerability : CVE-2018-1000556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can...

Photon OS 5.0: Libsoup PHSA-2025-5.0-0614

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0614. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-44594: Server-Side Request Forgery (SSRF)

halo v2.20.17 and before is vulnerable to server-side request forgery SSRF in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url...

CVE-2025-58976: Missing Authorization

Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through = 1.31.0...

CVE-2025-55054: Improper Neutralization of Input During Web Page Generation

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-39553: Missing Authorization

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 5.0.9...

CVE-2025-39523: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in GoodBarber GoodBarber goodbarber.This issue affects GoodBarber: from n/a through = 1.0.26...

CVE-2025-53291: Missing Authorization

Missing Authorization vulnerability in spoddev2021 Spreadconnect wc-spod.This issue affects Spreadconnect: from n/a through = 2.1.5...

CVE-2025-39541: Missing Authorization

Missing Authorization vulnerability in Roland Murg WP Simple Booking Calendar wp-simple-booking-calendar.This issue affects WP Simple Booking Calendar: from n/a through = 2.0.13...

CVE-2025-55052: Exposure of Sensitive Information to an Unauthorized Actor

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2025-55050: Inclusion of Undocumented Features or Chicken Bits

CWE-1242: Inclusion of Undocumented Features...

CVE-2025-58987: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through = 2.12.6...

CVE-2025-58981: Missing Authorization

Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through = 1.31.0...

CVE-2025-55049: Use of Default Cryptographic Key

Use of Default Cryptographic Key CWE-1394...

CVE-2025-58977: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Rhys Wynne WP eBay Product Feeds ebay-feeds-for-wordpress allows Server Side Request Forgery.This issue affects WP eBay Product Feeds: from n/a through = 3.4.8...

CVE-2025-9364: Exposure of Sensitive System Information to an Unauthorized Control Sphere

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data...

CVE-2025-9160: Missing Authentication for Critical Function

A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution...