1038 matches found
Veeam Backup and Replication < 12.3.2.4854 (kb4869)
The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4869 advisory. - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
CVE-2026-7186 Fix stored XSS in URL dashboard widget via dangerous URI schemes
Stored cross-site scripting in the URL dashboard widget in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme such as javascript: that executes scripts in other users' browsers when they view the...
CVE-2026-43968 affecting package rabbitmq-server for versions less than 3.13.7-5
CVE-2026-43968 affecting package rabbitmq-server for versions less than 3.13.7-5. A patched version of the package is available...
CVE-2026-4893 affecting package dnsmasq for versions less than 2.92-1
CVE-2026-4893 affecting package dnsmasq for versions less than 2.92-1. A patched version of the package is available...
CVE-2024-22018 affecting package nodejs for versions less than 24.14.1-3
CVE-2024-22018 affecting package nodejs for versions less than 24.14.1-3. An upgraded version of the package is available that resolves this issue...
EUVD-2026-34164
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the Workflow, Form block, and File/Set components that lack the allowedclasses restriction. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been...
CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25
CVE-2026-42502 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...
CVE-2026-40547
SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 Missing...
PT-2026-45357
SOPlanning is vulnerable to Stored Cross-Site Scripting XSS via /process/upload backup endpoint. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive containing a malicious user.csv file with embedded JavaScript. The injected code is executed in the...
CVE-2026-39828 affecting package packer for versions less than 1.9.5-14
CVE-2026-39828 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8
CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...
CVE-2026-42506 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
CVE-2026-42506 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...
CVE-2026-39821 affecting package skopeo for versions less than 1.14.4-11
CVE-2026-39821 affecting package skopeo for versions less than 1.14.4-11. A patched version of the package is available...
CVE-2026-39821 affecting package docker-compose for versions less than 2.27.0-11
CVE-2026-39821 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...
GitLab 17.1 < 18.10.7 / 18.11 < 18.11.4 / 19.0 < 19.0.1 (CVE-2026-1402)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2026-1402 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...
NPM: md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)
NPM: md-fileserver: Stored/Reflected XSS when viewing Markdown raw HTML allowed vulnerability discovered by ? in WordPress Npm md-fileserver versions 1.10.3...
Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy
...
CVE-2024-38635 affecting package kernel for versions less than 6.6.139.1-1
CVE-2024-38635 affecting package kernel for versions less than 6.6.139.1-1. A patched version of the package is available...