Linux Distros Unpatched Vulnerability : CVE-2022-35278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML i...

MAL-2025-46899 Malicious code in console_auth (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c545bd0ca0111537f9336af6eeeef4e580a90a7468ff22cf9b1b20dd3fcf51d The OpenSSF Package Analysis project identified 'consoleauth' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packag...

Linux TTY Console DoS

Vulnerability of the vccprobe function in the drivers/tty/vcc.c module – The Linux kernel’s TTY console support driver is vulnerable due to a pointer issue related to NULL pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Malicious code in network-console-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41584 Malicious code in network-console-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41454 Malicious code in @revizor/reporter-console (npm)

--- -= Per source details. Do not edit below this line.=-...

admin-console 安全漏洞

admin-console is an Agora core view management interface from Sequent open source. A security vulnerability exists in admin-console versions v1.2.0 through v1.6.7, which stems from improper handling of the /sys-api/role/update interface, which could lead to an SQL injection attack...

Linux Distros Unpatched Vulnerability : CVE-2020-13947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache...

Malicious code in cal-pretty-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b610f09a6268f2b584d18668b4311c4550b6cdbe798b386f161647b6b45299a8 The OpenSSF Package Analysis project identified 'cal-pretty-console' @ 10.13.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-41422 Malicious code in cal-pretty-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b610f09a6268f2b584d18668b4311c4550b6cdbe798b386f161647b6b45299a8 The OpenSSF Package Analysis project identified 'cal-pretty-console' @ 10.13.0 npm as malicious. It is considered malicious because: - The packa...

Incorrect authorization for traces request/download in CMC before 25.1.0

Summary An access control vulnerability was discovered in the Request Trace and Download Trace functionalities due to a specific access restriction not being properly enforced for users with limited privileges. Impact An authenticated user with limited privileges can request and download trace...

ROS-20250826-06

Vulnerability of SetQuantumFormat function of ImageMagick console graphic editor is related to incorrect calculation of buffer size when processing received packets. calculation of buffer size when processing received packets. Exploitation of the vulnerability may allow an attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2016-6810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

CVE-2025-8453

CVE-2025-8453 describes a CWE-269 vulnerability in Schneider Electric Saitel DR RTU (and related RTU products) where a privileged engineer with console access can modify a configuration file used by a root‑level daemon to execute scripts, enabling privilege escalation and potential arbitrary code...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

PT-2025-34053 · Unknown · Root-Level Daemon

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A CWE-269: Improper Privilege Management issue exists that may lead to privilege escalation and arbitrary code execution. This occurs when a privileged engineer user with console access modifies a...

SUSE SLES11: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2025:02844-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02844-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...