CVEs published by Tenable Network Security, Inc.

CVEs published by Tenable Network Security, Inc. (CVE Numbering Authority). 8 tracked.

CVE-2023-28663 HIGH 8.8 UPGRADE The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnera
CVE-2023-28665 MEDIUM 5.4 UPGRADE The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripti
CVE-2023-28666 MEDIUM 5.4 UPGRADE The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vuln
CVE-2026-18197 MEDIUM 6.1 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Lib
CVE-2026-18667 CRITICAL 9.6 A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by i
CVE-2026-19579 MEDIUM 5.4 UPGRADE Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkou
CVE-2026-19656 CRITICAL 9.9 DOWNGRADE ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user
CVE-2026-19657 MEDIUM 6.1 DOWNGRADE ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization