Known Vulnerabilities for Plugin-set by Tenable
Listed below are 1 of the newest known vulnerabilities associated with "Plugin-set" by "Tenable".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114719 json | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114718 json | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password pl... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114715 json | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114714 json | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_user... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114659 json | Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/pages ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114658 json | Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allow... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-113709 json | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-r... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-113613 json | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write ... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-113594 json | Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wi... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-113468 json | The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider.... | Not Provided | 2026-10-20 | 2026-10-20 |