23 matches found
libpcp-devel-6.3.8-3.1 on GA media (moderate)
libpcp-devel-6.3.8-3.1 on GA media Announcement ID: openSUSE-SU-2026:11490-1 Rating: moderate Cross-References: CVE-2026-16524 CVE-2026-16526 CVE-2026-16527 CVE-2026-16529 CVE-2026-16530 CVE-2026-16531 CVSS scores: CVE-2026-16524 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...
SUSE SLES15: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (SUSE-SU-2026:3505-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3505-1 advisory. - CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. - CVE-2026-16526: pmdaroot...
CVE-2026-16530
A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service...
Linux Distros Unpatched Vulnerability : CVE-2026-16530
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a...
CVE-2019-16530
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...
Linux Distros Unpatched Vulnerability : CVE-2017-16530
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of- bounds read and system crash or possibly have unspecifi...
CVE-2023-38333
Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in...
CVE-2023-38333
CVE-2023-38333 affects ManageEngine Applications Manager. The connected ZDI advisory indicates a vulnerability in the SingleSignOn page enabling remote code execution, with exploitation requiring a user to visit a malicious page. The underlying issue is improper validation/escaping, enabling arbi...
org.sonatype.nexus.assemblies:nexus-base-template (>=3.10.0-04 <=3.18.1-01), org.sonatype.nexus.assemblies:nexus-core-feature (>=3.0.0-03 <=3.18.1-01) +21 more potentially affected by CVE-2019-16530 via org.sonatype.nexus:nexus-repository (>=3.0.0-03 <=3.18.1-01)
org.sonatype.nexus:nexus-repository MAVEN version =3.0.0-03, =3.10.0-04, =3.0.0-03, =3.10.0-04, =3.10.0-04, =3.17.0-01, =0.0.4, =3.17.0-01, =3.10.0-04, =3.10.0-04, =3.11.0-01, =0.0.2, =3.13.0-01, =1.0.4, =3.10.0-04, =3.18.1-01 and more Source cves: CVE-2019-16530 Source advisory: OSV:GHSA-HM...
FreeBSD : nexus2-oss -- Multiple vulerabilities (b2f9573a-008c-11ea-9801-10c37b4ac2ea)
Sonatype reports : Several RCE vulnerabilities have been found and corrected in 2.14.15 : CVE-2019-16530: An attacker with elevated privileges can upload a specially crafted file. That file can contain commands that will be executed on the system, with the same privileges as the user running the...
CVE-2019-16530
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...
CVE-2019-16530
CVE-2019-16530 affects Sonatype Nexus Repository Manager (NXRM) 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, enabling remote code execution. Root cause reports indicate an attacker with sufficient privileges can upload a crafted file that executes code on the server. Several c...
nexus2-oss -- Multiple vulerabilities
Sonatype reports: Several RCE vulnerabilities have been found and corrected in 2.14.15: CVE-2019-16530: An attacker with elevated privileges can upload a specially crafted file. That file can contain commands that will be executed on the system, with the same privileges as the user running the...
CVE-2018-16530
The CVE-2018-16530 entry concerns Forcepoint Email Security version 8.5, where a stack-based buffer overflow in the product allows crafting input that can crash a process and cause a denial-of-service. The description notes that while no known Remote Code Execution (RCE) vulnerabilities exist, th...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4001)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4001 advisory. - USB: serial: console: fix use-after-free after failed setup Johan Hovold Orabug: 27206830 CVE-2017-16525 - uwb: properly check kthreadrun return...
Unbreakable Enterprise kernel security update
4.1.12-112.14.2 - fuse: Call endqueuedrequests after releasing fc-lock in fusedevrelease Ashish Samant Orabug: 26431550 - rds: Fix inaccurate accounting of unsignaled wrs in rdsibxmitrdma Hakon Bugge Orabug: 27097105 - rds: Fix inaccurate accounting of unsignaled wrs Hakon Bugge Orabug: 27097105 ...
Ubuntu 14.04 LTS : Linux kernel (AWS) vulnerabilities (USN-3485-3)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3485-3 advisory. It was discovered that a race condition existed in the ALSA subsystem of the Linux kernel when creating and deleting a port via ioctl. A local attacker...
USN-3485-1: Linux kernel vulnerabilities
It was discovered that a race condition existed in the ALSA subsystem of the Linux kernel when creating and deleting a port via ioctl. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-15265 Eric Biggers discovered that the key...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3485-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3485-1 advisory. It was discovered that a race condition existed in the ALSA subsystem of the Linux kernel when creating and deleting a port via ioctl. A local attacker...
