CVE-2020-3956

CVE-2020-3956 VMware Cloud Director のRCE（CVE-2020-3956）に対するPoCエクスプロイト 技術アドバイザリはこちらから入手できます： https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/...

gxdlmsdirector-cve

Gurux GXDLMS Director における複数の脆弱性 – リモートコード実行 Gurux GXDLMS Director は、DLMS/COSEM プロトコルを使用してエネルギー計量器とやり取りするためのオープンソースの Windows プログラムです。 このソフトウェアには、アドイン DLL と、OBIS コード（スマートメーターとやり取りするために必要なデバイス固有の定義）を含むファイルのためのリモート更新機能があります。 CVEID| Name of the affected products and versions| Problem type ---|---|---...

CVE-2026-102731

Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer or a MITM can send a small BER-encoded response causing a large memory allocation before any data is received. This can lead to an OutOfMemoryError and denial of service. The client JVM OOMs...

CVE-2026-88743

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...

EUVD-2026-79297

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...

CVE-2026-88743: Improper Neutralization of Input During Web Page Generation

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...

PT-2026-92471

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...

CVE-2026-88743

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...

CVE-2026-88743

Versions 4.7.0 - 6.5.0 of Bacularis are vulnerable to Stored cross-site scripting (XSS) within director tags . This vulnerability is caused by the improper neutralization of input during web page generation. The documents do not provide specific information regarding a root cause, practical impac...

CVE-2026-88743

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed queue reservation for XDP When XDP was configured on a system with a large number of CPUs and X722 NIC, there was a call trace involving a NULL pointer dereference. i40e 0000:87:00.0: Failed to obtain tracking for...

Astra Linux – Vulnerability in Bacula

In Bareos Director versions 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow vulnerability allows a malicious client to corrupt the director’s memory by sending overly large digest strings during the initialization of a verify job. Disabling verify jobs can mitigate this problem. This issue h...

Important: Red Hat Security Advisory: Updated Red Hat OpenStack Platform 16.2 director Operator container images

Updated container images are now available for director Operator for Red Hat OpenStack Platform 16.2 Train for RHEL 8.4. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud running on commonly availab...

PT-2026-83390

Name of the Vulnerable Software and Affected Versions BOSH vSphere CPI versions prior to 98.0.6 Description An issue in the communication protocol between BOSH Director and vCenter allows an attacker positioned between these two entities to intercept traffic and impersonate the vCenter REST API...

CVE-2026-41012: Improper Certificate Validation

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-72425

A flaw was found in the Linux kernel's ice driver. A local user could trigger a resource leak by resetting all Virtual Functions VFs while FDIR Flow Director filters are enabled. This occurs because control VSIs Virtual Station Interfaces are invalidated but not properly freed, leading to a gradu...

CVE-2026-68321

A flaw was found in the Linux kernel. A resource leak vulnerability exists in the txgbe network driver. This flaw occurs because Flow Director FDIR filters are not properly freed when the network interface is removed while it is in a down state. This can lead to a gradual consumption of system...

CVE-2026-68321 net: txgbe: fix FDIR filter leak on remove

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix FDIR filter leak on remove Perfect FDIR filters can be added while the interface is down and are kept on the software list for later restore. unregisternetdev only calls ndostop when the device is up, so...

CVE-2026-47829

Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator's workstation. Affecte...

CVE-2026-47829

Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to local command execution on the operator's workstation. Affecte...