435 matches found
CVE-2026-2676
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
CVE-2026-2676
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
CVE-2026-2676
CVE-2026-2676 concerns the GoofTech sms-ssm API, specifically the preHandle function in LoginInterceptor.java under the API Interface component. The weakness is described as allowing improper authorization, potentially exploitable remotely. The exploit is reportedly public, with no disclosed vers...
CVE-2026-2676 GoogTech sms-ssm API LoginInterceptor.java preHandle improper authorization
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
CVE-2026-2676: Improper Authorization
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
PT-2026-20544
Name of the Vulnerable Software and Affected Versions GoogTech sms-ssm versions prior to e8534c766fd13f5f94c01dab475d75f286918a8d Description A weakness exists due to improper authorization. This issue is related to the preHandle function within the LoginInterceptor.java file of the API Interface...
GHSA-37CX-329C-33X3 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, trivy-operator-fips, bom, crossplane-fips, flux, grype-db, gitlab-runner-fips, pulumi-language-java, trivy, cerbos, packer-fips, dagger, gitea, xeol, flux-kustomize-controller, argo-events-fips, syft, flux-source-controller, gitaly,...
CVE-2026-25934 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, trivy-operator-fips, bom, crossplane-fips, flux, grype-db, gitlab-runner-fips, pulumi-language-java, trivy, cerbos, packer-fips, dagger, gitea, xeol, flux-kustomize-controller, argo-events-fips, syft, flux-source-controller, gitaly,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: longhorn-cli, victoriametrics-operator, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, zabbix-agent2, rancher-webhook-fips, wuzz, cert-manager-cmctl, chaos-mesh-fips, crossplane-provider-aws-sns-fips, logstash-exporter,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: longhorn-cli, victoriametrics-operator, kubernetes-event-exporter, velero-plugin-for-microsoft-azure-fips, metrics-server, oras-fips, zabbix-agent2, rancher-webhook-fips, wuzz, cert-manager-cmctl, chaos-mesh-fips, crossplane-provider-aws-sns-fips, logstash-exporter,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: longhorn-cli, victoriametrics-operator, kubernetes-event-exporter, metrics-server, oras-fips, zabbix-agent2, rancher-webhook-fips, wuzz, cert-manager-cmctl, chaos-mesh-fips, crossplane-provider-aws-sns-fips, logstash-exporter, neuvector,...
Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3121 (ALAS-2025-3121)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3572.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3121 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy...
SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2025:4244-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4244-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or...
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2025:4244-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...
openSUSE Security Advisory (SUSE-SU-2025:4191-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2025:4191-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4191-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key...
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2025:4191-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...