Linux Distros Unpatched Vulnerability : CVE-2021-27364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsitransportiscsi.c is adversely affected by the ability of an unprivileged user to...

Linux Distros Unpatched Vulnerability : CVE-2022-43945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD...

CVE-2025-21472

Information disclosure while capturing logs as eSE debug messages are logged...

CVE-2025-21472 Leftover Debug Code in Secure Element

Information disclosure while capturing logs as eSE debug messages are logged...

CVE-2025-21472 Leftover Debug Code in Secure Element

Information disclosure while capturing logs as eSE debug messages are logged...

GHSA-4PCG-PJP5-3MC6 Concrete CMS vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page

Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting XSS in the Conversation Messages Dashboard Page. Unsanitized input could cause theft of session cookies or tokens, defacement of web content, redirection to malicious sites, and if victim is an admi...

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper input sanitization in the Conversation Messages Dashboard page. An attacker can execute arbitrary scripts in the context of a user's browser by...

CVE-2025-21472: Active Debug Code

Information disclosure while capturing logs as eSE debug messages are logged...

PT-2025-32127 · Ese · Ese

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: An information disclosure issue exists due to the logging of eSE debug messages during log capture. Recommendations: At the moment, there is no information about a newer version that contains a fix...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2025-1728)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-8571 Concrete CMS 9 through 9.4.2 and below 8.5.21 is vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page

Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting XSS in the Conversation Messages Dashboard Page. Unsanitized input could cause theft of session cookies or tokens, defacement of web content, redirection to malicious sites, and if victim is an admi...

CVE-2025-8571

Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting XSS in the Conversation Messages Dashboard Page. Unsanitized input could cause theft of session cookies or tokens, defacement of web content, redirection to malicious sites, and if victim is an admi...

CVE-2025-46658

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...

CVE-2025-46658

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...

CVE-2025-8571: Improper Input Validation

Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting XSS in the Conversation Messages Dashboard Page. Unsanitized input could cause theft of session cookies or tokens, defacement of web content, redirection to malicious sites, and if victim is an admi...

CVE-2025-46658: Generation of Error Message Containing Sensitive Information

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...

PT-2025-31938 · Unknown · Exonautweb

Name of the Vulnerable Software and Affected Versions: ExonautWeb versions 21.6 Description: The software exhibits verbose error messages. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-46658

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...

Concrete CMS security vulnerabilities

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. A security vulnerability exists in Concrete CMS versions 9 through 9.4.2 and prior to 8.5.21, which stems from a reflected cross-site scripting vulnerability in the Session Messages Dashboard page...

CVE-2025-46658

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages...