490206 matches found
EUVD-2026-65146
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
PT-2026-81056
Name of the Vulnerable Software and Affected Versions Event Tickets versions 5.29.2.1 and earlier Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Event Tickets to...
PT-2026-81059
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
PT-2026-80824
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
YARA-X 1.20.0
YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...
PT-2026-80840
Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...
PT-2026-80817
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...
PT-2026-80829
Name of the Vulnerable Software and Affected Versions Super Forms versions prior to 6.3.316 Description An unauthenticated arbitrary file download issue exists, allowing an attacker to download files from the server without providing credentials. Recommendations Update to a version newer than...
PT-2026-81055
Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...
PT-2026-81047
Name of the Vulnerable Software and Affected Versions Boost versions 2.0.4 and earlier Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...
PT-2026-81060
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
PT-2026-81046
Name of the Vulnerable Software and Affected Versions WooBeWoo Product Filter Pro versions prior to 3.1.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes t...
PT-2026-80844
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
PT-2026-80843
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
Microsoft .net Core SEoL (8.x)
According to its version, Microsoft .net Core is 8.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...
rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
...
ROOT-OS-DEBIAN-11-CVE-2022-48674 CVE-2022-48674 in linux - Patched by Root
Root has patched CVE-2022-48674 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-38560 CVE-2025-38560 in linux - Patched by Root
Root has patched CVE-2025-38560 in the linux package for Root:Debian:11. Multiple fixed versions available...