Lucene search
+L

7 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/19 12:0 a.m.9 views

Fedora 44 : python-asyncssh (2026-1f248487e4)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1f248487e4 advisory. update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file...

8.1CVSS5.5AI score0.00313EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2026/07/09 12:0 a.m.24 views

VulnCheck KEV: CVE-2026-31843

The goodoneuz/pay-uz Laravel package = 2.2.24 contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without authentication middleware, enabling remot...

10CVSS5.5AI score0.01302EPSS
SaveIn wildExploits0References3
OSV
OSV
added 2026/06/17 8:39 p.m.10 views

CVE-2026-49133 Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()

Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile with an empty folder...

7.1CVSS6AI score
SaveExploits0References6
Patchstack
Patchstack
added 2026/06/16 6:59 p.m.9 views

NPM: n8n: NoSQL Injection in MongoDB Node Find And Replace Operation

NPM: n8n: NoSQL Injection in MongoDB Node Find And Replace Operation vulnerability discovered by ? in WordPress Npm n8n versions 2.24.0...

7.7CVSS5.9AI score0.0026EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/16 12:0 a.m.26 views

PT-2026-50169

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.24.0 Description An endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response without sanitization or Content-Security-Policy headers. This allows for reflected Cross-Site...

7.6CVSS5.9AI score0.00177EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.7 views

WordPress plugin 10Web Booster security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...

9.1CVSS6.7AI score0.02788EPSS
SaveExploits2References1
CNVD
CNVD
added 2016/12/20 12:0 a.m.7 views

Apport Command Execution Vulnerability

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, and Apport is a toolkit that collects and provides feedback on errors information that the operating system finds useful when an application crashes. A security vulnerability exists in versio...

6.5CVSS7.2AI score0.06674EPSS
SaveExploits5References1
Rows per page
Query Builder