22005 matches found
PT-2026-33502
WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript via the "Nome" field in the "Informações Pacientes" page. The payload is stored and executed when the patien...
PT-2026-33414
Name of the Vulnerable Software and Affected Versions Unlimited Elements for Elementor versions prior to 2.0.7 Description An arbitrary file read issue exists due to insufficient path traversal sanitization in the URLtoRelative and urlToPath functions, combined with the ability to enable debug...
CubeCart 安全漏洞
CubeCart is an open-source e-commerce software developed by CubeCart. Versions of CubeCart prior to 6.6.0 contained security vulnerabilities. These vulnerabilities were caused by a path traversal issue, which could allow users with administrative privileges to access directories that they shouldn...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007231)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007231 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: make sure to pull inner header in ip6tnlrcv syzbot found ip6tnlrcv could access...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007530)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007530 advisory. In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidstatus There is this warning when using a kernel wi...
Security Updates for Microsoft SQL Server (April 2026)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A privilege escalation vulnerability CVE-2026-32167, CVE-2026-32176 - A remote code execution vulnerability CVE-2026-33120 Note that Nessus has not...
Unity Linux 20.1070a Security Update: pcs (UTSA-2026-007275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007275 advisory. Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's...
PT-2026-33461
Name of the Vulnerable Software and Affected Versions prasathmani TinyFileManager versions prior to 2.7 Description An issue in the File Upload Handler component allows for server-side request forgery, a flaw where an attacker can induce the server to make requests to an unintended location. This...
WeGIA 安全漏洞
WeGIA is a network manager for a welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.10 contained security vulnerabilities. These vulnerabilities were due to a vulnerability that made the system susceptible to storage-type cross-site scripting attacks. This allowed...
[SECURITY] Fedora 44 Update: plasma-nano-6.6.4-1.fc44
Minimalist Plasma shell for developing custom experiences on embedded devices...
[SECURITY] Fedora 44 Update: kf6-sonnet-6.25.0-1.fc44
KDE Frameworks 6 Tier 1 solution for spell checking...
[SECURITY] Fedora 44 Update: kf6-syndication-6.25.0-1.fc44
The Syndication Library...
[SECURITY] Fedora 44 Update: kf6-kunitconversion-6.25.0-1.fc44
KDE Frameworks 6 Tier 2 addon for unit conversions...
[SECURITY] Fedora 44 Update: kf6-kwidgetsaddons-6.25.0-1.fc44
KDE Frameworks 6 Tier 1 addon with various classes on top of QtWidgets...
[SECURITY] Fedora 44 Update: kf6-modemmanager-qt-6.25.0-1.fc44
A Qt 6 library for ModemManager...
[SECURITY] Fedora 44 Update: kf6-kservice-6.25.0-1.fc44
KDE Frameworks 6 Tier 3 solution for advanced plugin and service introspection...
[SECURITY] Fedora 44 Update: kf6-kpty-6.25.0-1.fc44
KDE Frameworks 6 tier 2 module providing Pty abstraction...
[SECURITY] Fedora 44 Update: kf6-kpeople-6.25.0-1.fc44
KDE Frameworks 6 Tier 3 library for interaction with XML RPC services...