CVE-2025-48056

CVE-2025-48056 affects the Hubble CLI before v1.17.2. A network attacker could inject malicious control characters into Hubble CLI terminal output, potentially compromising integrity and allowing concealing of log entries, rewriting output, or making the terminal temporarily unusable. Exploitatio...

CVE-2022-36076

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added and later checked a nonce was inadvertently rendered opt-i...

SimpleSAMLphp Reflected Cross-site Scripting vulnerability

Background SimpleSAMLphp uses metadata to determine how to interact with other SAML entities. This metadata includes what’s called endpoints, which are URLs belonging to that entity where SAML messages can be sent. These URLs are used directly by SimpleSAMLphp when a message is sent, either via a...

CVE-2023-27149

A stored cross-site scripting XSS vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list...

Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, USA. A security vulnerability exists in Enhancesoft osTicket v1.17.2. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a specially crafted payload injected into the Label input paramete...

Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, USA. A security vulnerability exists in Enhancesoft osTicket v1.17.2. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a specially crafted payload injected into the Role Name parameter...

PT-2023-13657 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.17.2 Description: The issue allows repo cloning to occur in the migration function. Recommendations: For versions prior to 1.17.2, update to version 1.17.2 or later to resolve the issue...

Code injection

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added and later checked a nonce was inadvertently rendered opt-i...

PT-2022-23164 · Nodebb · Nodebb Forum

Name of the Vulnerable Software and Affected Versions: NodeBB Forum Software versions prior to 1.17.2 Description: The issue is caused by an unnecessarily strict conditional in the code handling the first step of the Single Sign-On SSO process. This conditional inadvertently rendered the...

SUSE-SU-2021:3488-1 Security update for go1.17

This update for go1.17 fixes the following issues: Update to go1.17.2 - CVE-2021-38297: misc/wasm, cmd/link: do not let command line args overwrite global data bsc1191468...

Security fix for the ALT Linux 9 package c-ares version 1.17.2-alt1

1.17.2-alt1 built Aug. 19, 2021 Anton Farygin in task 282608 Aug. 11, 2021 Anton Farygin - 1.17.2 Fixes: CVE-2021-3672...

Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt2

1.17.2-alt2 built July 28, 2021 Ivan A. Melnikov in task 280683 July 25, 2021 Ivan A. Melnikov - Backport fixes from 1.18.4 Fixes: CVE-2021-36222...

Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt1

1.17.2-alt1 built Nov. 24, 2020 Ivan A. Melnikov in task 262110 Nov. 19, 2020 Ivan A. Melnikov - 1.17.2 Fixes: CVE-2020-28196...

MediaWiki Information Disclosure Vulnerability (Jan 2012) - Linux

MediaWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...