CVE-2026-80350

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

CVE-2026-80350: Server-Side Request Forgery (SSRF)

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

CVE-2026-73555

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2026-5627

A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the "AgentFlows" component. The vulnerability arises from improper handling of user input in the "loadFlow" and "deleteFlow" methods in "server/utils/agentFlows/index.js". Specifically,...

CVE-2026-4999

A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2. This issue affects the function uploadFile of the file /server/utils/upload.js of the component isImg Check. The manipulation of the argument fileType leads to path traversal. Remote...

CVE-2026-32719: Improper Limitation of a Pathname to a Restricted Directory

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The ImportedPlugin.importCommunityItemFromUrl function in server/utils/agents/imported.js downloads a ZIP file from a community hub URL and extracts i...

MAL-2025-192571 Malicious code in paypal-scripts-server-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba55fed7af17fadd676b95594de23778a414dc138beda86d133775a45fdcb03c The package paypal-scripts-server-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in common-server-utils (npm)

The package common-server-utils was found to contain malicious code...

RHSA-2011:0433 Red Hat Security Advisory: xorg-x11-server-utils security update

Bulletin has no description...

Malicious code in node-config-server-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a77c066606c4a4a84afcd49a13b450d6d65f2d7f351ff6d37d75743c5e1792 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: xorg-x11-server-utils

An update is available for xorg-x11-server-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

Fedora 25 : 3:mariadb (2017-801e01d1ed)

Important change : - Most of the utilities were move to the new sub-package 'server-utils' Other enhancements: see changelog - CVE fixes, SPECfile fixes, patches revision, tests blacklist revisions - Preparation and testing of the Cracklib plugin to be added Note that Tenable Network Security has...

Oracle: Security Advisory (ELSA-2013-0502)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-0433)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11-server-utils-7.4 package on the CentOS operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Oracle Linux 6 : Core X11 clients (ELSA-2013-0502)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0502 advisory. - x11perf 1.5.4 CVE-2011-2504 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 5 / 6 : xorg-x11-server-utils (ELSA-2011-0433)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0433 advisory. 7.4-15.el60.1 - cve-2011-0465: Sanitize cpp macro expansion. CVE 2011-0465 Tenable has extracted the preceding description block directly from the Oracle...

Scientific Linux Security Update : Core X11 clients on SL6.x i386/x86_64 (20130221)

It was found that the x11perfcomp utility included the current working directory in its PATH environment variable. Running x11perfcomp in an attacker- controlled directory would cause arbitrary code execution with the privileges of the user running x11perfcomp. CVE-2011-2504 Also with this update...

CentOS Update for xorg-x11-utils CESA-2013:0502 centos6

Check for the Version of xorg-x11-utils OpenVAS Vulnerability Test CentOS Update for xorg-x11-utils CESA-2013:0502 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for xorg-x11-server-utils CESA-2013:0502 centos6

Check for the Version of xorg-x11-server-utils OpenVAS Vulnerability Test CentOS Update for xorg-x11-server-utils CESA-2013:0502 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...