1497 matches found
CVE-2025-58057 vulnerabilities
Vulnerabilities for packages: solr, grpc-java-fips, sonarqube, tez, neo4j, zookeeper-fips, apache-hop, camunda-zeebe, keycloak-fips, management-api-for-apache-cassandra-4.0, apache-hop-fips, elasticsearch, apicurio-registry, cloudwatch-exporter, zookeeper, flyway, kafka, keycloak, opensearch,...
GHSA-3P8M-J85Q-PGMJ vulnerabilities
Vulnerabilities for packages: solr, grpc-java-fips, sonarqube, tez, neo4j, zookeeper-fips, apache-hop, camunda-zeebe, keycloak-fips, management-api-for-apache-cassandra-4.0, apache-hop-fips, elasticsearch, apicurio-registry, cloudwatch-exporter, zookeeper, flyway, kafka, keycloak, opensearch,...
Linux Distros Unpatched Vulnerability : CVE-2023-26735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports...
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
PT-2025-34797 · Ipfire · Ipfire
Name of the Vulnerable Software and Affected Versions: IPFire version 2.29 Description: The Calamaris log exporter CGI script /cgi-bin/logs.cgi/calamaris.dat does not properly sanitize user-supplied input before using it in shell commands. This allows a remote, unauthenticated attacker to inject...
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
CVE-2025-50974
The IPFire firewall and router (version 2.29 ) is vulnerable to an OS Command Injection vulnerability in the Calamaris log exporter CGI script (/cgi-bin/logs.cgi/calamaris.dat). The root cause is the improper sanitization of user-supplied input before incorporating parameter values into a shell c...
Linux Distros Unpatched Vulnerability : CVE-2020-16248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both...
Malicious code in excel-data-exporter (npm)
The package excel-data-exporter was found to contain malicious code...
MAL-2025-20036 Malicious code in excel-data-exporter (npm)
The package excel-data-exporter was found to contain malicious code...
CVE-2025-47907 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure, dbmate, aactl, cosign, secrets-store-csi-driver-provider-gcp, glow, licenseclassifier, secrets-store-csi-driver-provider-azure, grpc-health-probe, cri-tools, crossplane-provider-azure-authorization, kubernetes-release, grpcurl,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: prometheus-redis-exporter-fips, cilium, argo-workflows, harbor-scanner-trivy, nerdctl-fips, kube-conformance, k6-fips, splunk-otel-collector, kubernetes-csi-external-snapshotter-fips, cri-tools, step, crossplane-provider-azure-storage, verticadb-operator-fips,...
Security update 5.0.5 for Multi-Linux Manager Client Tools, Salt and Salt Bundle
This update fixes the following issues: golang-github-prometheus-nodeexporter: Security issues fixed: CVE-2025-22870: Prevent a matching of hosts against proxy patterns to improperly treat an IPv6 zone ID as a hostname component bsc1238686 Other bugs fixed: Fixed Darwin memory leak pressure: Fix...
Security update 5.0.5 for Multi-Linux Manager Client Tools, Salt and Salt Bundle
This update fixes the following issues: golang-github-prometheus-nodeexporter: Security issues fixed: CVE-2025-22870: Prevent a matching of hosts against proxy patterns to improperly treat an IPv6 zone ID as a hostname component bsc1238686 Other bugs fixed: Fixed Darwin memory leak pressure: Fix...
WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Store Exporter versions = 2.7.6...
Fedora 43 : node-exporter (2025-6f02e8f9d3)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6f02e8f9d3 advisory. Automatic update for node-exporter-1.9.1-1.fc43. Changelog Tue Jul 8 2025 Mikel Olasagasti Uranga - 1.9.1-1 - Update to 1.9.1 - Closes rhbz2346095 rhbz234093...
SUSE SLES15 / openSUSE 15 Security Update : Multi-Linux Manager Client Tools (SUSE-SU-2025:01989-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01989-1 advisory. golang-github-prometheus-prometheus was updated to version 2.53.4: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 fo...