92866 matches found
OESA-2025-2620 poppler security update
Poppler is a free software utility library for rendering Portable Document Format PDF documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fixes: An issue...
Lexmark Printers Cross-site Request Forgery (CVE-2020-10095)
A vulnerability has been identified in the embedded web server used in Lexmark devices. The vulnerability allows the attacker to modify the configuration of the device. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503883; scriptversion"1.2";...
CVE-2020-35667
creationtimestamp| type| source ---|---|--- 2025-11-05 21:00:04+00:00| exploited| Telegram/QVvFPeHcOZrMwVaFo1uhjDTZRvYrKaEOPoiNmt5Stzg9hE 2026-06-19 12:45:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e616575a-e23f-4bb0-857b-55265aff27c5...
Security update for aws-efs-utils
This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. CVE-2020-35881: traitobject: log4rs:...
SUSE-SU-2025:3954-1 Security update for aws-efs-utils
This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: - CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. - CVE-2020-35881: traitobject: log4rs:...
Exploit for Server-Side Request Forgery in Jetbrains Teamcity
TeamCity IntelliJ IDEA Plugin credential interception CVE-20...
[SECURITY] [DLA 4363-1] dcmtk security update
Debian LTS Advisory DLA-4363-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 03, 2025 https://wiki.debian.org/LTS Package : dcmtk Version : 3.6.5-1+deb11u5 CVE ID : CVE-2020-36855 CVE-2022-4981 CVE-2025-9732 Debian Bug : 1113993 Several vulnerabilities...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
IEEE P802.11-REVme D1.1 through D7.0 allow FragAttacks against mesh networks. In mesh networks that use Wi-Fi Protected Access WPA, WPA2, or WPA3 or Wired Equivalent Privacy WEP, an adversary can exploit this vulnerability to inject arbitrary frames towards devices that support receiving non-SSP...
CVE-2020-36858
creationtimestamp| type| source ---|---|--- 2025-10-31 17:56:44+00:00| seen| Telegram/MGXyjKZXtv7r0oJ3ajlBwGta5OlBzAghy5oF4FCu6djT2M...
CVE-2020-36857
creationtimestamp| type| source ---|---|--- 2025-10-31 17:56:38+00:00| seen| Telegram/m9niFbw1UwnJsuZeMoQgNt26WVcu9Tw-ebxLplJ7rit8WYw...
CVE-2020-36860
creationtimestamp| type| source ---|---|--- 2025-10-31 14:55:19+00:00| seen| Telegram/42hAgTq1YU2AOFJiFQDE7pd7gm3qO4Bqejpb0E92yj3HQPs...
CVE-2020-36867
creationtimestamp| type| source ---|---|--- 2025-10-31 13:55:02+00:00| seen| Telegram/E3PSfWUUGLp4OSMsPUMQF1d5QI-OfQct44YQSoCrIgEijO8...
CVE-2020-36865
Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting XSS via the BPI Business Process Intelligence component’s Config Management and Edit Config page. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...
CVE-2020-36864
Nagios XI versions prior to 5.7.2 are vulnerable to cross-site scripting XSS via the background color settings in Dashboards. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
CVE-2020-36869
Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not properly...
CVE-2020-36860
The Core Config Manager CCM in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple cross-site scripting XSS vulnerabilities in the object edit pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in th...
CVE-2020-36869
creationtimestamp| type| source ---|---|--- 2025-10-30 21:53:11+00:00| seen| Telegram/WxKZmPPrkpfONvDaDim0fHWb0gRkYUnR7y4zvPODjgUdTGI...
CVE-2020-36862
creationtimestamp| type| source ---|---|--- 2025-10-30 21:53:03+00:00| seen| Telegram/2yb6d8qIUEQFG9u3EJ4YzmM5eDHFnTpGOszkeK10OU0IrMI...