Browsing: Alerts

HomeDescriptionA reflected cross-site scripting issue exists in URL handling.PUBLISHED Reserved 2026-05-26 | Published 2026-05-28 | Updated 2026-05-28 | Assigner tenableMEDIUM: 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NProblem typesCWE-80 Improper neutralization of…

HomeDescriptionImproper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection. A user with…

Serial number: AV26-524Date: May 28, 2026 On May 28, 2026, Mitel published a security advisory to address vulnerabilities in the following…

Serial number: AV26-523Date: May 28, 2026 On May 27, 2026, Tanium published security advisories to address vulnerabilities in the following products:…

HomeDescriptionLocal Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to…

Overview Casdoor versions 2.362.0 and earlier contain several identity and access management vulnerabilities that enable broad authentication bypass and privilege…

HomeDescriptionA user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full…

Serial number: AV26-519Date: May 28, 2026 On May 27, 2026, Veeam published security advisories to address vulnerabilities in the following products:…

HomeDescriptionA vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the…

HomeDescriptionIn the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_internal_buffers() The recent change in…