521 matches found
Login Configurator <=2.1 - Cross-Site Scripting
Login Configurator WordPress plugin = 2.1 contains a reflected cross-site scripting caused by improper escaping of URL parameter before outputting it to the page, letting attackers execute scripts in the context of site administrators, exploit requires victim to visit a malicious URL. id:...
Oracle E-Business Suite - Server-Side Request Forgery
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. id:...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: extism, gosu, nri-elasticsearch, snyk-cli, nri-kafka, trillian, cortex, speedtest-go, cadvisor, cert-manager-webhook-pdns, crossplane-provider-aws-kms, grafana-mimir, nri-nginx, trust-manager, neuvector-sigstore-interface, pombump, temporal-ui-server, haproxy-ingress...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: extism, gosu, nri-prometheus, render-template, flyte, snyk-cli, ghaudit, kyverno-policy-reporter-ui, s5cmd, policy-controller, prometheus-adapter, spark-operator, crossplane-provider-aws, cortex, trillian, eksctl, cadvisor, pulumi-kubernetes-operator,...
FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (10f5f76e-90a5-11f1-bc30-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5f76e-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which...
CLEANSTART-2026-CQ71708 Security fixes in newrelic-prometheus-configurator 2.9.0-r0
Package newrelic-prometheus-configurator version 2.9.0-r0 fixes 12 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820...
openSUSE 16 Security Update : nm-configurator (openSUSE-SU-2026:21428-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21428-1 advisory. This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in...
OPENSUSE-SU-2026:21428-1 Security update for nm-configurator
This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...
SUSE-SU-2026:22935-1 Security update for nm-configurator
This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...
EUVD-2026-46978
Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards component: Configuration Management. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...
EUVD-2026-46587
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...
CVE-2026-60620
Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards component: Configuration Management. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...
CVE-2026-60181
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...
CVE-2026-60181
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...
MySQL 9.7 -- Multiple vulnerabilities
The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which apply to the MySQL 9.7 series and to the MySQL Router shipped with these ports. The 9.7 branch is affected by every server issue of the 8.4 branch plus twelve additional ones in code paths that only exi...
PT-2026-62263
Name of the Vulnerable Software and Affected Versions MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the Server: Configurator component allows a low privileged attacker with access to the infrastructure where the software executes to...
nm-configurator-0.3.5-2.1 on GA media (moderate)
nm-configurator-0.3.5-2.1 on GA media Announcement ID: openSUSE-SU-2026:11280-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...
OPENSUSE-SU-2026:11280-1 nm-configurator-0.3.5-2.1 on GA media
These are all security issues fixed in the nm-configurator-0.3.5-2.1 package on the GA media of openSUSE Tumbleweed...
CLEANSTART-2026-MA49342 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.4.4-r0, 2.4.4-r1, 2.9.0-r0
Multiple security vulnerabilities affect the newrelic-prometheus-configurator package. These issues are resolved in later releases. See references for individual vulnerability details...