Lucene search
+L

20108 matches found

Github Security Blog
Github Security Blog
added 2026/05/01 9:30 a.m.17 views

OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8.5CVSS6.2AI score0.00843EPSS
SaveExploits0References11Affected Software1
Snyk
Snyk
added 2026/05/01 9:30 a.m.10 views

Unsafe Dependency Resolution

Overview ironic-python-agent is an Ironic Python Agent Ramdisk Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the grub-install process. An attacker can achieve code execution by providing a malicious partition image that is deployed and subsequently chrooted ...

8.5CVSS6AI score0.00843EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/01 9:16 a.m.14 views

PYSEC-2026-205

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

7.5CVSS6AI score0.00843EPSS
SaveExploits0References3
PyPA
PyPA
added 2026/05/01 9:16 a.m.23 views

PYSEC-2026-205

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8CVSS6AI score0.00843EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/05/01 9:16 a.m.11 views

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8.5CVSS0.00843EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/05/01 9:16 a.m.11 views

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8.5CVSS5.9AI score0.00843EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/01 9:16 a.m.13 views

UBUNTU-CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8.5CVSS6.2AI score0.00843EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/01 12:00 a.m.10 views

EUVD-2025-209606

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean field...

7.5CVSS5.8AI score0.00332EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/01 12:00 a.m.10 views

CVE-2025-63547

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field...

5.8AI score0.00358EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/01 12:00 a.m.40 views

CVE-2025-63547

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field...

0.00358EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.23 views

Micro XRCE-DDS Agent 安全漏洞

Micro XRCE-DDS Agent is an eProsima open source proxy bridging tool for resource constrained devices to communicate with the DDS world. A security vulnerability exists in Micro XRCE-DDS Agent version 3.0.1, which stems from the MTU length field in specially crafted packets and could lead to a...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2026/05/01 12:00 a.m.15 views

google-osconfig-agent-20260330.00-2.1 on GA media (moderate)

google-osconfig-agent-20260330.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:10655-1 Rating: moderate Cross-References: CVE-2026-34986 CVSS scores: CVE-2026-34986 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-34986 SUSE : 8.7...

8.7CVSS5.8AI score0.00651EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/05/01 12:00 a.m.10 views

google-guest-agent-20260402.00-2.1 on GA media (moderate)

google-guest-agent-20260402.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:10654-1 Rating: moderate Cross-References: CVE-2026-34986 CVSS scores: CVE-2026-34986 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-34986 SUSE : 8.7...

8.7CVSS5.8AI score0.00651EPSS
SaveExploits0
CVE
CVE
added 2026/05/01 12:00 a.m.62 views

CVE-2026-43003

CVE-2026-43003 affects OpenStack Ironic Python Agent (IPA) versions 1.0.0 through 11.5.0. The issue arises when IPA sometimes executes grub-install from within a chroot of the deployed partition image, enabling code execution in the presence of a malicious image. The CVSSv3.1 metrics indicate a h...

8.5CVSS6.2AI score0.00843EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.17 views

Micro XRCE-DDS Agent 安全漏洞

Micro XRCE-DDS Agent is an eProsima open source proxy bridging tool for resource constrained devices to communicate with the DDS world. A security vulnerability exists in Micro XRCE-DDS Agent version 3.0.1 that stems from improper handling of non-valid values in Boolean fields, which could lead t...

7.5CVSS5.8AI score0.00332EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/01 12:00 a.m.20 views

CVE-2025-63548

The CVE-2025-63548 entry concerns Eprosima Micro-XREC-DDS Agent v3.0.1. The issue allows a remote attacker to cause a denial of service by sending a packet with a non-valid value in any Boolean field. The NVD metrics indicate a Network attack vector, low complexity, no privileges, and an Availabi...

7.5CVSS5.8AI score0.00332EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/01 12:00 a.m.47 views

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8CVSS0.00843EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/01 12:00 a.m.11 views

EUVD-2026-26489

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8CVSS6.2AI score0.00843EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/01 12:00 a.m.14 views

EUVD-2025-209605

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/01 12:00 a.m.13 views

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8CVSS6.4AI score
SaveExploits0References10
Rows per page
Query Builder