490112 matches found
EUVD-2026-65174
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
EUVD-2026-65173
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
EUVD-2026-65172
Unauthenticated PHP Object Injection in The Events Calendar = 6.17.2 versions...
EUVD-2026-65168
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
EUVD-2026-65163
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
EUVD-2026-65162
Unauthenticated SQL Injection in Boost = 2.0.4 versions...
EUVD-2026-65171
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
EUVD-2026-65164
Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...
EUVD-2026-65161
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
Oracle Linux 8 : python3.12 (ELSA-2026-58971)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58971 advisory. 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227198 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Fedora 44 : freeipa / samba (2026-903d904933)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-903d904933 advisory. Update to Samba 4.24.6 and rebuild of freeipa ---- This update contains no changes; it exists purely to keep the Fedora 44 freeipa package...
CVE-2026-75421
aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...
OpenSSL Toolkit 4.0.2
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 4.0 release...
EUVD-2026-66178
aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...
Fedora 43 : kernel (2026-6d18f005f1)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d18f005f1 advisory. The 7.1.10 stable kernel update contains a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream...
JetBrains TeamCity < 2020.1.2 (CVE-2020-27627)
The version of JetBrains TeamCity installed on the remote host is prior to 2020.1.2. It is, therefore, affected by a vulnerability: - JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. CVE-2020-27627 Note that Nessus has not tested for this issue but has instead relied only on th...
PT-2026-81131
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-79787: Improper Authentication
Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, including service accounts, to read,...
