205418 matches found
CVE-2020-0601
CVE-2020-0601 This script is checking if the hotfix for CVE-2020-0601 is applied according to your Windows version. Furthermore it checks if there is a attempt to exploit the known vulnerability. The .xml file is for ControlUp Users. Import the XML file to your Script Based Actions as usual. All...
Magento - SQL Injection
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. id: CVE-2019-7139 info: name: Magento - SQL Injection author: MaStErChO severity: critical description: | An unauthenticated user can execute SQL...
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
tshirtecommerce PrestaShop Module - SQL Injection
The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the tshirtecommercedesigncartid parameter, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. This is due to lack of input sanitization, as shown in t...
ca-certificates security update
2026.2.92v9.0.319-100.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-100.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-100.1 - Removing: AAA Certificate Services root CA - Removing: emSign ECC Root CA - G3 fr...
ca-certificates security update
2026.2.92v9.0.319-81.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-81.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-81 - Update to CKBI 2.92v9.0.319 from NSS 3.131.1 Removing: - emSign Root CA - C1 Adding: -...
CLSA-2026-1792692686 TuxCare security update for 39 packages (15 CVEs)
TuxCare rebuilt 39 packages to address 15 CVEs. Fixed in 10.1.16-tuxcare.1...
CLSA-2026-1792687381 TuxCare security update for 36 packages (4 CVEs)
TuxCare rebuilt 36 packages to address 4 CVEs. Fixed in 7.0.109-tuxcare.5...
CLSA-2026-1792686740 TuxCare security update for 38 packages (6 CVEs)
TuxCare rebuilt 38 packages to address 6 CVEs. Fixed in 9.0.39-tuxcare.1...
CVE-2026-41940-Security-Patch
CVE-2026-41940-Security-Patch Unofficial temporary patch for the CVE-2026-41940 vulnerability Can be used for temporary defense Please upgrade to the official release as soon as conditions permit cPanel Security Announcement:...
CLSA-2026-1792686134 TuxCare security update for 33 packages (9 CVEs)
TuxCare rebuilt 33 packages to address 9 CVEs. Fixed in 9.0.13-tuxcare.1...
CLSA-2026-1792686128 TuxCare security update for 35 packages (13 CVEs)
TuxCare rebuilt 35 packages to address 13 CVEs. Fixed in 8.5.78-tuxcare.1...
ROOT-APP-PYPI-CVE-2026-59204 CVE-2026-59204 in pillow - Patched by Root
Root has patched CVE-2026-59204 in the pillow package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1792667085 TuxCare security update for 36 packages (24 CVEs)
TuxCare rebuilt 36 packages to address 24 CVEs. Fixed in 8.5.46-tuxcare.1...
CLSA-2026-1792666002 TuxCare security update for 40 packages (17 CVEs)
TuxCare rebuilt 40 packages to address 17 CVEs. Fixed in 10.1.33-tuxcare.1...
CLSA-2026-1792652081 TuxCare security update for pillow (10 CVEs)
TuxCare rebuilt pillow to address 10 CVEs. Fixed in 11.3.0.post8+tuxcare...
study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095
Investigation Report on Struts2 Vulnerabilities S2-054, S2-055 and Jackson Vulnerability CVE-2017-7525, CVE-2017-15095 We have published a summarized article that condenses the key points for easier reading. Recommended for those who want to get an overview first or don't have much time. SSTtechl...
Jellyfin <10.7.0 - Local File Inclusion
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...
Debian dla-4850 : ata-modules-6.12.107+deb12-armmp-di - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4850 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4850-1 [email protected]...