EUVD-2026-48186

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

EUVD-2026-48164

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

EUVD-2026-48144

Contributor SQL Injection in Create by Mediavine = 2.5.3 versions...

EUVD-2025-210505

Administrator Cross Site Scripting XSS in WP-Polls = 2.77.3 versions...

RHSA-2026:43711 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

Bulletin has no description...

RHSA-2026:42875 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - aom

Bulletin has no description...

RHSA-2026:41949 Red Hat Security Advisory: python3.14 security update

Bulletin has no description...

GHSA-CJ75-F6XR-R4G7 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pghero, pghero-fips, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...

WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Social Ninja versions = 4.3.0...

EUVD-2026-47888

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10...

CVE-2026-60368

creationtimestamp| type| source ---|---|--- 2026-07-23 01:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbn5xyb2r2q 2026-07-23 04:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbxafd5kr2a 2026-07-23 16:52:52+00:00| seen|...

CVE-2026-61246

creationtimestamp| type| source ---|---|--- 2026-07-23 00:56:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbmwaws4w2b 2026-07-23 01:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbn6kcks22w 2026-07-23 01:48:05+00:00| seen|...

PT-2026-64169

Name of the Vulnerable Software and Affected Versions Johnson Controls CCure 9000 and victor application server versions 2.9 through 3.0 Description A Server Side Request Forgery SSRF issue exists in the Victor application server. SSRF is a flaw that allows an attacker to induce the server-side...

Oracle WebLogic Server Multiple Vulnerabilities (July 2026 CPU) (12.2.1.4.0 / 14.1.1.0.0 / 15.1.1.0.0)

The 12.2.1.4.0, 14.1.1.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Easily...

Oracle WebLogic Server (July 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

Oracle GoldenGate 19.x < 19.32.0.0.260721 (July 2026 CPU)

The 19.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate component: Service Manager. Easily exploitable vulnerability allows low privileged...

MiracleLinux 9 : php:8.3 (AXSA:2026-1333:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1333:01 advisory. PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions CVE-2026-7258 PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting...

Fedora 43 : libssh (2026-063caa9112)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-063caa9112 advisory. New upstream security release 2503148 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

PT-2026-63933

Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...

Fedora 43 : chromium (2026-ac712bf651)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ac712bf651 advisory. Update to 150.0.7871.128 CVE-2026-15899: Use after free in CameraCapture CVE-2026-15900: Use after free in GPU CVE-2026-15901: Use after free in...