Linux Distros Unpatched Vulnerability : CVE-2026-22675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary...

CVE-2026-22675: Improper Neutralization of Input During Web Page Generation

OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-Agent HTTP headers to the /ocsinventory endpoint. Attackers can register rogue agents or craft...

CVE-2018-19602

OCS Inventory NG Server versions vX to vX is vulnerable to SQL injection due to improper input validation...

CVE-2018-19603

OCS Inventory NG Server versions vX to vX does not process XML input securely, leading to Missing XML Validation...