28 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-10060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server...
CVE-2025-10060
MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...
CVE-2025-10060
creationtimestamp| type| source ---|---|--- 2025-09-05 23:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly4tilfj322r...
CVE-2025-10060
MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...
Linux Distros Unpatched Vulnerability : CVE-2018-10060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitizeuri function in lib/functions.php...
CVE-2012-10060 Sysax Multi Server < 5.55 SSH Username Buffer Overflow
Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code...
CVE-2013-10060
An authenticated OS command injection vulnerability exists in Netgear routers tested on the DGN2200B model firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted input to the pppoeusername parameter. Thi...
CVE-2019-10060
The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2016-10060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows...
CVE-2015-10060
creationtimestamp| type| source ---|---|--- 2023-01-17 16:26:30+00:00| seen| https://t.me/cibsecurity/56583...
CVE-2015-10060
A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/views.py. The manipulation of the argument id1/id2 leads to sql injection. The identifier of the patch is 829a027aca7c17f5a7ec1addca8dd5d5542f86ac. It is...
CVE-2015-10060
CVE-2015-10060 affects the MNBikeways database. The vulnerability is a SQL injection in the processing of Data/views.py caused by manipulating the id1/id2 parameters. A patch with hash 829a027aca7c17f5a7ec1addca8dd5d5542f86ac exists. Connected sources confirm this issue and its patch; no exploita...
Debian: Security Advisory (DLA-2965-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2965-1] cacti security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2965-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler March 29, 2022 https://wiki.debian.org/LTS -...
CVE-2020-10060
CVE-2020-10060 affects Zephyr’s UpdateHub module. The vulnerability arises in updatehub_probe: after JSON parsing, the code accesses objects[1], which can reference uninitialized stack memory if the JSON has fewer than two elements. This could crash the process, cause a denial of service, or pote...
CVE-2014-10060
CVE-2014-10060 entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-10060
...
CVE-2019-10060
The CVE-2019-10060 issue affects Verix Multi-app Conductor for Verifone Verix (version 2.7). The vulnerability is a buffer overflow in a configuration key value that enables arbitrary code execution and requires the attacker to download files to the device. Several connected sources (Red Hat, CNV...
CVE-2012-10060
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssh/sysaxsshusername.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
CVE-2018-10060
CVE-2018-10060 affects Cacti prior to 1.1.37, where the sanitize_uri function in lib/functions.php fails to reject unintended characters, enabling cross-site scripting (XSS). The issue is described across multiple sources (Cacti CVE entry, CNVD CNVD-2018-08679, Debian DLA-2965-1, and OpenVAS entr...