Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989705 advisory. In the Linux kernel, the following vulnerability has been resolved: zsmalloc: fix races between asynchronous zspage free and page migration The asynchronous zspage...

CVE-2016-15054

Nagios XI versions prior to 5.4.0 are vulnerable to cross-site scripting XSS via the jQuery Migrate library. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

CVE-2024-13997

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

CVE-2024-13997

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

CVE-2016-15054

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a downstream effect of an already identified vulnerability, CVE-2012-6708...

CVE-2016-15054

...

CVE-2016-15054

CVE-2016-15054 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-15054

...

CVE-2024-13997 Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

CVE-2024-13997 Nagios XI < 2024R1.1.3 Privilege Escalation via Migrate Server Feature to Root on Host

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

CVE-2024-13997

Nagios XI prior to 2024R1.1.3 is affected by a privilege-escalation vulnerability in the Migrate Server feature. An authenticated administrator can abuse the migration workflow to obtain root privileges on the underlying XI host, effectively taking full control of the operating system. Root cause...

PT-2025-44798

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.4.0 Description Nagios XI versions prior to 5.4.0 are susceptible to a cross-site scripting XSS issue due to insufficient validation or escaping of user-supplied input within the jQuery Migrate library. This could...

CVE-2024-13997: Improper Privilege Management

Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.1.3, which stems from a mismanagement of...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migratefolio in gfs2rgrp,metaaops. The warning added in 7ee3647243e5 “migrate: Remove call to -writepage” that occurs in various xfstests, causing “something found in dmesg” failures, has been resolved. 341.136573...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: Add a target node validity check in damonmigratepages. This validation is taken from dopagesmove, which is used in the movepages system call. The bug occurs when damonmigratepages attempts to migrate pages ev...

CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers

The U.S. Cybersecurity and Infrastructure Security Agency CISA and National Security Agency NSA, along with international partners from Australia and Canada, have released guidance to harden on-premise Microsoft Exchange Server instances from potential exploitation. "By restricting administrative...

EUVD-2025-36832

Malicious code in ts-migrate-example npm...

Malicious code in ts-migrate-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c089f283eddbfd2554393c29fc93368e75a6329803352ed0175155f436915f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49055 Malicious code in ts-migrate-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c089f283eddbfd2554393c29fc93368e75a6329803352ed0175155f436915f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...