198672 matches found
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
Magento - SQL Injection
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. id: CVE-2019-7139 info: name: Magento - SQL Injection author: MaStErChO severity: critical description: | An unauthenticated user can execute SQL...
tshirtecommerce PrestaShop Module - SQL Injection
The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the tshirtecommercedesigncartid parameter, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. This is due to lack of input sanitization, as shown in t...
Jellyfin <10.7.0 - Local File Inclusion
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...
CVE-2026-41940-Security-Patch
CVE-2026-41940-Security-Patch Misure di correzione temporanee non ufficiali per la vulnerabilità CVE-2026-41940 Possono essere utilizzate per una difesa temporanea Se le condizioni lo consentono, aggiorna il prima possibile alla versione ufficiale Avviso di sicurezza cPanel:...
CLSA-2026-1787928056 TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.1.21-tuxcare.11...
CVE-2026-6876
creationtimestamp| type| source ---|---|--- 2026-08-28 12:45:20+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-sanano-molteplici-vulnerabilita-in-servicenow 2026-08-28 18:51:52+00:00| seen| https://infosec.exchange/ap/users/116810780845358081/statuses/117173922729622633...
CVE-2020-0601
CVE-2020-0601 Questo script verifica se l'hotfix per CVE-2020-0601 è stato applicato in base alla versione di Windows in uso. Inoltre, controlla se vi è un tentativo di sfruttare la vulnerabilità nota. Il file .xml è destinato agli utenti di ControlUp. Importa il file XML nelle tue azioni Script...
RHSA-2026:60485 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2026:60486 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2026:60484 Red Hat Security Advisory: kernel security update
Bulletin has no description...
study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095
Untersuchungsbericht zu Struts2-Schwachstellen S2-054, S2-055 und Jackson-Schwachstellen CVE-2017-7525, CVE-2017-15095 Eine Zusammenfassung der wichtigsten Punkte in lesbarer Form wurde veröffentlicht. Empfohlen für alle, die zuerst einen Überblick benötigen oder wenig Zeit haben. SSTtechlog 08 z...
USN-8661-3: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
RHSA-2026:60437 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2026:60438 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
RHSA-2026:60394 Red Hat Security Advisory: libxml2 security update
Bulletin has no description...
RHSA-2026:60383 Red Hat Security Advisory: bind security update
Bulletin has no description...
RHSA-2026:60354 Red Hat Security Advisory: rhc security update
Bulletin has no description...