1162836 matches found
RHEL 9 : osbuild-composer (RHSA-2026:59560)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59560 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...
RHEL 9 : golang (RHSA-2026:57649)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57649 advisory. The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via...
JetBrains TeamCity < 2019.1.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2019.1.2. It is, therefore, affected by multiple vulnerabilities: - JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting XSS, potentially making it possible to send an arbitrary HTTP request to a TeamCity...
PT-2026-81865
A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit form.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has...
CVE-2026-79793: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...
CVE-2026-17089: Improper Neutralization of Input During Web Page Generation
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'headerformat' parameter in all versions up to, and including, 7.4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for...
JetBrains TeamCity < 2021.1.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2021.1.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is possible. CVE-2021-43193 - In JetBrains TeamCity before...
PT-2026-81252
Name of the Vulnerable Software and Affected Versions hbs versions 2.1.0 through 4.2.1 Description The registerAsyncHelper API in the hbs Express view engine bypasses the automatic HTML escaping of Handlebars. During the first render pass, an async helper returns an opaque placeholder that is...
CVE-2026-15917: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS. This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2...
CVE-2026-16640: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0...
JetBrains TeamCity < 2020.2.3 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2020.2.3. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages. CVE-2021-31908 - In JetBrains TeamCity before 2020.2.3, argument injectio...
JetBrains TeamCity < 2020.2.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2020.2.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page. CVE-2021-31904 - In the TeamCity IntelliJ plugin before...
Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)
The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory. - A use-after-free vulnerability in the Lua...
CVE-2026-78264
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
CVE-2026-78263
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78282
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
CVE-2026-32556
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
CVE-2026-78282
CVE-2026-78282 affects the WordPress Stripe Payments plugin in versions
