Debian dsa-6445 : ironic-api - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6445 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6445-1 [email protected] https://www.debian.org/securit...

SUSE CVE-2026-54421

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...

CVE-2026-54421

creationtimestamp| type| source ---|---|--- 2026-06-14 07:32:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moaauv2ng32f 2026-06-14 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116747994648309538 2026-06-14 10:30:26+00:00| seen|...

DEBIAN-CVE-2026-54421

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...

CVE-2026-54421

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...

Linux Distros Unpatched Vulnerability : CVE-2026-54421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitiv...

EUVD-2022-54421

Malicious code in bioql PyPI...

CVE-2025-54421

creationtimestamp| type| source ---|---|--- 2025-08-18 18:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwoz3pl5mb2g...

CVE-2024-54421

Cross-Site Request Forgery CSRF vulnerability in SanjayNegi Floating Video Player floating-player allows Stored XSS.This issue affects Floating Video Player: from n/a through = 1.0...

CVE-2024-54421

creationtimestamp| type| source ---|---|--- 2024-12-16 16:51:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113663533019821343...

CVE-2024-54421 WordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in SanjayNegi Floating Video Player floating-player allows Stored XSS.This issue affects Floating Video Player: from n/a through = 1.0...

CVE-2024-54421

CVE-2024-54421 is a CSRF-to-Stored XSS vulnerability in Floating Video Player (plugin: Floating Video Player, version up to 1.0). The Red Hat and Wordfence entries confirm the issue, describing an unauthenticated CSRF path that enables stored XSS. The Wordfence vuln details indicate patch status ...