Oracle Linux 9 : openssl (ELSA-2026-50379)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50379 advisory. 3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: ad...

Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities

Summary Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445,...

CVE-2026-34181 vulnerabilities

Vulnerabilities for packages: openssl...

DEBIAN-CVE-2026-34181

Issue Summary: The PKCS12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 PBMAC1 integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user can cause a service...

CVE-2026-34181

creationtimestamp| type| source ---|---|--- 2026-06-09 16:53:35+00:00| seen| https://mstdn.social/users/jschauma/statuses/116721189556088584 2026-06-10 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities20260611 2026-06-23 12:01:01+00:00| seen|...

PT-2025-34181

Name of the Vulnerable Software and Affected Versions: Oxford Instruments Imaris Viewer affected versions not specified Description: The software contains a remote code execution issue due to an uninitialized pointer during IMS file parsing. Recommendations: At the moment, there is no information...

CVE-2022-34181

Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller ...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2023-34181

Cross-Site Request Forgery CSRF vulnerability in WP-Cirrus plugin = 0.6.11 versions...

CVE-2023-34181

A vulnerability in gaap WP-Cirrus wp-cirrus.This issue affects WP-Cirrus: from n/a through = 0.6.11...

CVE-2023-34181

CVE-2023-34181 is a CSRF vulnerability in the WordPress WP-Cirrus plugin (versions 0.6.11 or equivalent patch when released.

CVE-2023-34181 WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP-Cirrus plugin = 0.6.11 versions...

CVE-2021-34181

creationtimestamp| type| source ---|---|--- 2023-01-05 20:58:25+00:00| seen| https://t.me/cibsecurity/54036...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181

The connected documents confirm CVE-2021-34181 is a Cross Site Scripting (XSS) vulnerability in TomExam 3.0 exploitable via the p_name parameter passed to list.thtml. The root cause is an input handling/output encoding weakness that allows script injection. Affected software is TomExam 3.0; no ex...

Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.14 / 2.332.4.1 / 2.346.1.4 Multiple Vulnerabilities (CloudBees Security Advisory 2022-06-22)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.303.x prior to 2.303.30.0.14, or 2.x prior to 2.332.4.1 or 2.346.1.4. It is, therefore, affected by multiple vulnerabilities, including the following: - Jenkins Pipeline: Input Step Plugin...

com.thalesgroup.jenkins-ci.plugins:cpptest (>=0.10 <=0.14), org.jenkins-ci.plugins:gallio (>=1.6 <=1.8) +4 more potentially affected by CVE-2022-34181 via org.jenkins-ci.plugins:xunit (>=1.23 <=1.91)

org.jenkins-ci.plugins:xunit MAVEN version =1.23, =0.10, =1.6, =0.13, =1.0, =1.1 Source cves: CVE-2022-34181 Source advisory: OSV:GHSA-298J-9Q4W-6RM4...

CVE-2022-34181

Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller ...

CVE-2022-34181

Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller ...

CVE-2022-34181

CVE-2022-34181 concerns Jenkins xUnit Plugin (versions ≤ 3.0.8). The vulnerability arises from an agent-to-controller message that creates a user-specified directory on the Jenkins controller and parses files inside it as test results. This allows an attacker who can control agent processes to (1...