22 matches found
Devolutions Server < 2026.1.20 Multiple Vulnerabilities (DEVO-2026-0014)
The version of Devolutions Server installed on the remote host is prior to 2026.1.20. It is, therefore, affected by multiple vulnerabilities, including: - Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without...
ECHO-E406-9590-08F0
Bulletin has no description...
MiracleLinux 9 : java-21-openjdk-21.0.6.0.7-1.el9.ML.1 (AXSA:2025-9590:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9590:02 advisory. JDK: Enhance array handling CVE-2025-21502 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...
RHEL 7 : openstack-puppet-modules (RHSA-2017:0359)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:0359 advisory. openstack-puppet-modules provides a collection of Puppet modules which Red Hat OpenStack Platform director uses to install and configure OpenStack...
CVE-2024-9590
creationtimestamp| type| source ---|---|--- 2024-10-22 12:06:34+00:00| seen| https://t.me/cvedetector/8599...
WordPress Category and Taxonomy Meta Fields Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Category and Taxonomy Meta Fields Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9590 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0608197ee970 Credits István...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2022-9590)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9590 advisory. - floppy: use a statically allocated error counter Willy Tarreau Orabug: 34218638 CVE-2022-1652 - x86: Disable RET on kexec Konrad Rzeszutek Wilk...
CVE-2020-9590
Adobe DNG SDK CVE-2020-9590 affects 1.5 and earlier versions and describes a heap overflow that could enable arbitrary code execution if exploited. Multiple connected sources confirm the SDK’s heap overflow vulnerability and advise updating to mitigate risk: ThreatPost notes updates to 1.5.1 for ...
CVE-2016-9590
An information-disclosure flaw was discovered in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions...
CVE-2019-9590
An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...
CVE-2019-9590
CVE-2019-9590 affects the TENGCONTROL T-920 PLC, version v5.5. The issue allows a remote attacker to trigger a denial of service (persistent failure mode) by sending a specific payload: the byte sequence 0x19 0xB2 0x00 0x00 0x00 0x06 0x43 0x01 0x00 0xAC 0xFF 0x00 (UID 0x43) to TCP port 502. The a...
CVE-2018-9590
CVE-2018-9590 affects Android 7.0–9, described as an out-of-bounds read in add_attr() within sdp_discovery.c. The issue could enable remote information disclosure without user interaction and with network access as the attack vector; no exploitation details are provided in the connected documents...
CVE-2016-9590
puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...
CVE-2016-9590
puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...
CVE-2016-9590
CVE-2016-9590 affects puppet-swift (used by Red Hat OpenStack Platform director to install Object Storage). Root cause: during installation the Puppet script deploys the service and incorrectly removes and then recreates proxy-server.conf with world-readable permissions, enabling information disc...
CVE-2017-9590
The CVE-2017-9590 entry concerns the State Bank of Waterloo Mobile Banking app (iOS, version 3.0.2, id555321714). The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...
CVE-2014-9590
CVE-2014-9590 entry is rejected/not used and does not represent an active vulnerability.
Moderate: Red Hat Security Advisory: openstack-puppet-modules security update
An update for openstack-puppet-modules is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
Moderate: Red Hat Security Advisory: puppet-swift security update
An update for puppet-swift is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...