Prommetrix

Información: Prommetrix es una herramienta de software libre para obtener información relevante de las instancias de 'Node Exporter' ejecutadas por 'Prometheus'. Prometheus es una solución de código abierto de monitoreo de eventos y alertas basada en métricas para aplicaciones en la nube. Es...

DevDojo Voyager <=1.8.0 - Cross-Site Scripting

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. id: CVE-2024-55416 info: name: DevDojo Voyager =1.8.0 - Cross-Site Scripting author:...

CVE-2026-29114

CVE-2026-29114 — 大华（Dahua）设备CA根证书暴露 公告类型： 厂商协调的安全披露 CVE ID： CVE-2026-29114 厂商： 大华技术（Dahua Technology） 发布时间： 2026-06-10T05:44:50 UTC 最后修改： 2026-06-10T05:44:50 UTC 来源： 大华产品安全事件（PSI）信任中心 目录 执行摘要 概览 与相关CVE的关系 漏洞时间线 描述 技术分析 受影响产品 CVSS评分 漏洞评分详情 CWE分类 攻击前提条件 利用场景 影响评估 检测与入侵指标 缓解与补救措施 临时解决方案 厂商回应 参考 免责声明...

CVE-2026-50229

⚡ CVE-2026-50229 — Explotación XSS de Apache Tomcat Examples 🔴 Escáner y Exploit Avanzado de Cross-Site Scripting XSS para la Aplicación Web de Ejemplos de Apache Tomcat 📌 Descripción general CVE-2026-50229 es una vulnerabilidad de Cross-Site Scripting XSS descubierta en la aplicación web de...

Fedora 45 : python-jwcrypto (2026-6d094c5360)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d094c5360 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cups: cups-2.4.19-4.2.hum1 aarch64, x8664 cups-client-2.4.19-4.2.hum1 aarch64, x8664 cups-devel-2.4.19-4.2.hum1 aarch64, x8664 cups-filesystem-2.4.19-4.2.hum1 noarch cups-ipptool-2.4.19-4.2.hum1...

PT-2026-92006

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Information disclosure occurs within the Networking component. Recommendations Update Firefox t...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in OpenSSL

Issue summary: A timing side-channel that could potentially allow the recovery of the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow an attacker to recover the private key. However, measuring the timing woul...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in imagemagick

The function WritePALMImage in /coders/palm.c uses sizet type conversions in several parts of the calculation. This could lead to values that are outside the range of the representable type unsigned long, resulting in undefined behavior when a malicious input file is processed by ImageMagick...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass the same-origin policy and proxy settings through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Web Browser UI of Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe dialog context menu via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Extensions in Google Chrome prior to version 124.0.6367.60 allowed a remote attacker to perform UI spoofing through a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in imagemagick

In the IntensityCompare function within /MagickCore/quantize.c, a double value was being converted to an int and then returned. In some cases, this resulted in a value that was outside the range of the type int. This flaw could be triggered by a malicious input file under certain conditions when...

Important: edk2

Issue Overview: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a...

Low: mount-s3

Issue Overview: libgit2 Submodule path traversal CVE-2026-53584 Affected Packages: mount-s3 Issue Correction: Run dnf update mount-s3 --releasever 2023.12.20260914 or dnf update --advisory ALAS2023-2026-2137 --releasever 2023.12.20260914 to update your system. More information on how to update yo...