195 matches found
Oracle Linux 9 : vsftpd (ELSA-2026-0605)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-0605 advisory. - Fix CVE-2025-14242 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...
CVE-2026-0605
creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:46+00:00| seen| Telegram/dnE6g3S2HF2ctEv4QL4AWKZnSnaJLWH3AV76rFV0fRF-qPg...
CVE-2026-0605
The CVE-2026-0605 entry concerns code-projects Online Music Site 1.0, specifically a SQL injection in the /login.php handler caused by improper handling/manipulation of the username and password parameters. All connected documents consistently indicate the flaw is exploitable remotely and that th...
EUVD-2026-0605
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2003-0737
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2021-0605
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In pfkeydump of afkey.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel wit...
CVE-2025-0605
An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements...
CVE-2024-0605
Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage. This vulnerability affec...
CVE-2025-0605
An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements...
CVE-2025-0605
creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17277...
CVE-2025-0605
CVE-2025-0605 affects GitLab CE/EE: versions 16.8 up to before 17.10.7, 17.11 up to before 17.11.3, and 18.0 up to before 18.0.1. The issue allows certain users to bypass two‑factor authentication due to group access controls. The connected documents confirm the vulnerability scope and impact but...
CVE-2025-0605 Weak Authentication in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements...
CVE-2025-0605
Removed by vendor...
GitLab 16.8 < 17.10.7 / 17.11 < 17.11.3 / 18.0 < 18.0.1 (CVE-2025-0605)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass...
Linux Distros Unpatched Vulnerability : CVE-2017-0605
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was n...
SUSE: Security Advisory (SUSE-SU-2025:0605-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2024-229 Malicious code in wlwz-2312-0605 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f5d11a952e9ce33409441a2d8039b0e4df70a7e4c1305c4f9bfce5a4231480b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-0605 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f5d11a952e9ce33409441a2d8039b0e4df70a7e4c1305c4f9bfce5a4231480b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-0605
creationtimestamp| type| source ---|---|--- 2024-01-22 20:26:23+00:00| seen| https://t.me/ctinow/171398 2024-02-16 09:41:30+00:00| seen| https://t.me/ctinow/186213...
CVE-2024-0605
Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage. This vulnerability affec...