11948 matches found
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
[SECURITY] Fedora 41 Update: firefox-142.0.1-1.fc41
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
Impact A denial-of-service was found in Exiv2 version v0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata can cause Exiv2 to run for a long time. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of imag...
The vulnerability of Dell PowerScale InsightIQ software for performance monitoring and reporting, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger service interruptions...
The vulnerability of the software for monitoring performance of SolarWinds Database Performance Analyzer (DPA) arises from the use of pre-installed configuration data, allowing a hacker to execute a Man-in-the-Middle (MITM) attack.
The vulnerability of the software for monitoring the performance of SolarWinds Database Performance Analyzer DPA is related to the use of pre-installed configuration data. Exploiting this vulnerability could allow an attacker to carry out a Man-in-the-Middle MITM attack...
GHSA-W54X-XFXG-4GXQ NeuVector process with sensitive arguments lead to leakage
Impact When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation. For example, java -cp /app ... Djavax.net.ssl.trustStorePassword= The command with the password appears in the NeuVector security event. To prevent this, NeuVector uses the...
PT-2025-35111
Name of the Vulnerable Software and Affected Versions: NeuVector versions prior to 5.4.6 Description: NeuVector process handling can lead to the leakage of sensitive arguments, such as passwords, within security event logs. The software uses regular expressions to detect and redact sensitive data...
CVE-2025-30059
In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection...
CVE-2025-30059
Technical details about CVE-2025-30059 are not provided in the connected EUVD entries or the references. Monitor for updates; the current documents do not specify affected versions, root cause specifics, or remediation steps.
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
Nagios XI ĺŽĺ ¨ćźć´
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R2, which stems from cross-site scripting in a...
PT-2025-34786 ¡ Nagios Enterprises ¡ Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI version 2024R2 Description: A cross-site scripting XSS vulnerability exists that allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in ...
CVE-2025-56432
A cross-site scripting (XSS) vulnerability exists in Nagios XI version 2024R2 . The flaw is located in a web component responsible for rendering performance-related data . A remote attacker can exploit this by providing a specially crafted URL to execute arbitrary JavaScript within the session co...
Malicious code in @espace-client-axafr/performance-indicator (npm)
The package communicates with a domain associated with malicious activity...
SUSE-SU-2025:02971-1 Security update for pam
This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234...
Security update for pam
This update for pam fixes the following issues: Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...
