13767 matches found
SAP Solution Manager - Open Redirect
SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-26836 info: name: SAP Solution Manager - Open...
CVE-2026-66451
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
CVE-2026-66451 WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
CVE-2026-66451
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
CVE-2026-66451
CVE-2026-66451 affects the WordPress plugin WP Event Solution (
EUVD-2026-53884
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
Linux Distros Unpatched Vulnerability : CVE-2026-62313
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-62313 Note that Nessus relies on the presence of the package as reported by the vendor. C Tenable, Inc...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Linux Distros Unpatched Vulnerability : CVE-2026-18018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file...
CVE-2026-18029 Insufficient validation of payment status in pretix-girosolution
Our payment integration with GiroCheckout did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment...
Kibana 8.7.0 < 8.19.18 / 9.0.x < 9.3.7 / 9.4.x < 9.4.3 Authorization Bypass (ESA-2026-59)
The version of Kibana installed on the remote host is 8.7.0 prior to 8.19.18, or 9.3.x prior to 9.3.7, or 9.4.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-59 advisory. - Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to...
Linux Distros Unpatched Vulnerability : CVE-2026-63319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2026-9238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - hw/9pfs: cap Treaddir allocation CVE-2026-9238 Note that Nessus relies on the presence of the package as reported by t...
Linux Distros Unpatched Vulnerability : CVE-2026-16390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
Linux Distros Unpatched Vulnerability : CVE-2026-64249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: region: fix use-after-free in childregionswithfirmware Move ofnodeputchildregion after the error print to avoid accessing freed memory when prerr referenc...
Linux Distros Unpatched Vulnerability : CVE-2026-16365
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16365 Note that Nessus relies on t...
Linux Distros Unpatched Vulnerability : CVE-2026-16362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
Linux Distros Unpatched Vulnerability : CVE-2026-16356
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.1...
EUVD-2026-46877
Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards component: Solution Advisor. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...
CVE-2026-60499
Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards component: Solution Advisor. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...