WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WooCommerce Orders & Customers Exporter versions = 5.4...

[SECURITY] Fedora 43 Update: rust-monitord-exporter-0.4.1-5.fc43

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

[SECURITY] Fedora 41 Update: rust-monitord-exporter-0.4.1-2.fc41

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

[SECURITY] Fedora 42 Update: rust-monitord-exporter-0.4.1-5.fc42

monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors...

Fedora: Security Advisory (FEDORA-2025-7180673d99)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : rust-monitord / rust-monitord-exporter (2025-7180673d99)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-7180673d99 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora: Security Advisory (FEDORA-2025-467e4d1489)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-9566 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, prometheus-podman-exporter...

GHSA-WP3J-XQ48-XPJW vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, prometheus-podman-exporter...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak, celeborn, druid, logstash-input-tcp, wildfly, akhq, solr, zipkin, selenium, tez, flyway, sonarqube, cloudwatch-exporter, opensearch, zookeeper, thingsboard, logstash-input-beats, cassandra-reaper, apache-nifi, trino, wavefront-proxy...

CVE-2025-58057 vulnerabilities

Vulnerabilities for packages: kafka, kserve-modelmesh, cloudwatch-exporter, infinispan, wavefront-proxy, celeborn, logstash-input-tcp, akhq, docker-selenium, knative-kafka-broker, thingsboard, keycloak, zookeeper, elasticsearch, cassandra-fips, logstash-input-http, apache-pulsar, keycloak-fips,...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: kafka, kserve-modelmesh, cloudwatch-exporter, infinispan, wavefront-proxy, celeborn, logstash-input-tcp, akhq, docker-selenium, knative-kafka-broker, thingsboard, keycloak, zookeeper, elasticsearch, cassandra-fips, logstash-input-http, apache-pulsar, keycloak-fips,...

Linux Distros Unpatched Vulnerability : CVE-2023-26735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports...

CVE-2025-50974

The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...

CVE-2025-50974

The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...

PT-2025-34797 · Ipfire · Ipfire

Name of the Vulnerable Software and Affected Versions: IPFire version 2.29 Description: The Calamaris log exporter CGI script /cgi-bin/logs.cgi/calamaris.dat does not properly sanitize user-supplied input before using it in shell commands. This allows a remote, unauthenticated attacker to inject...

CVE-2025-50974

The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...

CVE-2025-50974

The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...

CVE-2025-50974

The CVE-2025-50974 issue affects IPFire 2.29: the Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) does not sanitize user input before embedding parameters into a shell command. This allows an unauthenticated, remote attacker to inject arbitrary OS commands by supplying shell metachar...

Linux Distros Unpatched Vulnerability : CVE-2020-16248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both...