1038 matches found
CVE-2023-24021 affecting package mod_security for versions less than 2.9.7-8
CVE-2023-24021 affecting package modsecurity for versions less than 2.9.7-8. An upgraded version of the package is available that resolves this issue...
CVE-2019-14494 affecting package cppcheck for versions less than 2.18.3-1
CVE-2019-14494 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-42717 affecting package mod_security for versions less than 2.9.7-8
CVE-2021-42717 affecting package modsecurity for versions less than 2.9.7-8. An upgraded version of the package is available that resolves this issue...
CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2
CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
Oracle MySQL Cluster 8.4.x < 8.4.7 (October 2025 CPU)
The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General libxml2. Easily exploitable vulnerability allows...
Kentico Xperience < 13.0.178 Multiple Vulnerabilities
According to its self-reported version number, the version of Kentico Xperience on the remote Windows host is prior to 13.0.178. It is, therefore, affected by multiple vulnerabilities: - An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync...
EUVD-2025-35430
Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through 2.1.7...
CVE-2024-45783 affecting package grub2 for versions less than 2.06-15
CVE-2024-45783 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45778 affecting package grub2 for versions less than 2.06-15
CVE-2024-45778 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
Drupal CivicTheme Design System module < 1.12.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS vulnerability discovered by Adam Bramley acbramley in WordPress Module CivicTheme Design System versions 1.12.0...
Microsoft Edge (Chromium) < 141.0.3537.85 (CVE-2025-11756)
The version of Microsoft Edge installed on the remote Windows host is prior to 141.0.3537.85. It is, therefore, affected by a vulnerability as referenced in the October 17, 2025 advisory. - Use after free in Safe Browsing. CVE-2025-11756 Note that Nessus has not tested for this issue but has...
libssh: out-of-bounds read in sftp_handle()
A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in...
WordPress Tuturn plugin < 3.6 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Tuturn versions 3.6...
AZL-68468 CVE-2025-39967 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcondosetfont Fix integer overflow vulnerabilities in fbcondosetfont where font size calculations could overflow when handling user-controlled font parameters. The vulnerabilities occur when: 1...
CVE-2025-11713 Potential user-assisted code execution in “Copy as cURL” command
Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and...
CVE-2025-40771
A vulnerability has been identified in SIMATIC CP 1542SP-1 6GK7542-6UX00-0XE0 All versions V2.4.24, SIMATIC CP 1542SP-1 IRC 6GK7542-6VX00-0XE0 All versions V2.4.24, SIMATIC CP 1543SP-1 6GK7543-6WX00-0XE0 All versions V2.4.24, SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL 6AG2542-6VX00-4XE0 All versions...
PT-2025-41906
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Description A malicious webpage could create a fake address bar to deceive users when the address bar was hidden due to scrolling on Android devices. This occurred in response to a visibilitychange event...
CVE-2025-11573
An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...
CVE-2025-11573
CVE-2025-11573 affects Amazon.IonDotnet library. Versions earlier than 1.3.2 are vulnerable to an infinite loop triggered by specially crafted text input, leading to denial of service. Remediation is to upgrade to 1.3.2 or higher; the library has been deprecated as of 2025-08-20 and will not rece...