19925 matches found
CVE-2025-26487 Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9
Server-Side Request Forgery SSRF vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge...
CVE-2025-26487
CVE-2025-26487 describes a Server-Side Request Forgery (SSRF) in Infinera MTC-9 web server. Affected component: Infinera MTC-9; root cause and exact affected versions are not detailed in the provided documents. Impact: remote unauthenticated users can access other network resources by sending HTT...
Infinera MTC-9 安全漏洞
Infinera MTC-9 is a modular controller from Infinera USA. A security vulnerability exists in the Infinera MTC-9 that originates from server-side request forgery and could lead to access to other network resources...
PT-2025-49536
Name of the Vulnerable Software and Affected Versions Infinera MTC-9 versions R22.1.1.0275 through R23.0 Description A flaw exists in input validation within Infinera MTC-9 that enables remote, unauthenticated attackers to disrupt service and trigger a reboot of the appliance, leading to a...
Infinera MTC-9 安全漏洞
Infinera MTC-9 is a modular controller from Infinera USA. A security vulnerability exists in Infinera MTC-9 version R22.1.1.0275 through versions prior to R23.0, which stems from improper validation of Netconf service inputs and could lead to a denial of service attack...
PT-2025-49530
Name of the Vulnerable Software and Affected Versions Infinera MTC-9 affected versions not specified Description The software contains a Server-Side Request Forgery SSRF issue. This allows remote, unauthenticated users to access other network resources by leveraging HTTPS requests through the...
Infinera MTC-9 安全漏洞
Infinera MTC-9 is a modular controller from Infinera USA. A security vulnerability exists in Infinera MTC-9 version R22.1.1.0275 through versions prior to R23.0, which stems from a misconfiguration of the remote shell service that could result in system access...
PT-2025-49542
Name of the Vulnerable Software and Affected Versions Infinera MTC-9 versions R22.1.1.0275 through R22.9.9 Description An improper configuration of the SSH service in Infinera MTC-9 can allow an unauthenticated attacker to execute arbitrary commands and access data on the file system. The issue...
Infinera MTC-9 安全漏洞
Infinera MTC-9 is a modular controller from Infinera USA. A security vulnerability exists in Infinera MTC-9 version R22.1.1.0275 through versions prior to R23.0, which stems from a misconfiguration of the SSH service that could result in the execution of arbitrary commands and access to file syst...
RockyLinux 9 : udisks2 (RLSA-2025:15018)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:15018 advisory. udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...
Mageia: Security Advisory (MGASA-2025-0317)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
nodejs:18 security update
An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...
EUVD-2025-200466
ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family...
RockyLinux 9 : openssl (RLSA-2025:21255)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:21255 advisory. openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap CVE-2025-9230 Tenable has extracted the preceding description block directly from the RockyLinux...
RockyLinux 9 : tigervnc (RLSA-2025:20958)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20958 advisory. xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal...
RockyLinux 9 : squid (RLSA-2025:20935)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20935 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the precedin...
RockyLinux 9 : podman (RLSA-2025:21702)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:21702 advisory. runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects CVE-2025-52881 Tenable has extracted the preceding...
RockyLinux 9 : delve and golang (RLSA-2025:21815)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:21815 advisory. golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 Tenable has extracted the preceding description block directly from the...
RockyLinux 9 : zziplib (RLSA-2025:20838)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20838 advisory. zziplib: directory traversal in unzzipcat in the bins/unzzipcat-mem.c CVE-2018-17828 Tenable has extracted the preceding description block directly from the...
RockyLinux 9 : bind (RLSA-2025:21110)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21110 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 Tenable has extracted the...