34 matches found
CVE-2026-10294
creationtimestamp| type| source ---|---|--- 2026-08-11 11:52:18+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3msskh4gdlk25 2026-08-11 11:52:19+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3msskh5kfv225...
SUSE SLED15: PackageKit / PackageKit-backend-zypp / PackageKit-devel / etc (SUSE-SU-2026:3404-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3404-1 advisory. - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Tenable h...
Security update for PackageKit
This update for PackageKit fixes the following issue: CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Special Instructions and Notes: Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for PackageKit
This update for PackageKit fixes the following issues: CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Special Instructions and Notes: Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaS...
SUSE SLES16: PackageKit / PackageKit-backend-zypp / PackageKit-branding-upstream / etc (SUSE-SU-2026:22860-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22860-1 advisory. Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non...
Security update for PackageKit (moderate)
openSUSE security update: security update for packagekit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21425-1 Rating: moderate References: bsc1263252 bsc1267250 Cross-References: CVE-2026-10294 CVSS scores: CVE-2026-10294 SUSE : 4.3...
SUSE-SU-2026:22860-1 Security update for PackageKit
This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...
OESA-2026-2689 PackageKit security update
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API. Security Fixes: A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of th...
Linux Distros Unpatched Vulnerability : CVE-2026-10294
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such...
UBUNTU-CVE-2026-10294
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclose...
CVE-2026-10294
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclose...
CVE-2026-10294 PackageKit API pk-transaction.c g_file_test improper authorization
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclose...
CVE-2026-10294
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclose...
MiracleLinux 4 : rh-mysql57-mysql-5.7.20-1.AXS4 (AXSA:2017-2483:02)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2483:02 advisory. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Upda...
CVE-2025-10294
creationtimestamp| type| source ---|---|--- 2025-10-15 09:03:49+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m37v5oozxh26 2025-10-15 11:35:41+00:00| seen| https://gist.github.com/Darkcrai86/faa659daaf80610390fdc6388ce41afd 2025-10-19 21:02:32+00:00| seen|...
WordPress CE21 Suite Plugin <= 2.2.0 is vulnerable to Broken Access Control
Software CE21 Suite Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10294 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 61161cac4b51 Credits István Márton Required privile...
RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2017:3265)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3265 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...
CVE-2019-10294
CVE-2019-10294 concerns the Jenkins Kmap Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The underlying issue enables exposure to users with Extended Read permission or with access to the master filesystem. The initial entry and multiple connected a...
Flexense DiskBoss 9.1.16 Cross Site Scripting
Description: URL: l ocalhost/ Affected Component: /?n0ipr0csalert'XSS'n0ipr0cs=1 Vulnerability Type: Cross Site Scripting https://cwe.mitre.org/data/definitions/79.html Vendor of Product: Flexense-DiskBoss Version: v7.4.28 to v9.1.16 Attack Type: Remote Impact: This attack allows an attacker code...