20585 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-1712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Argument injection in special agent configuration in Checkmk 2.4.0p1, 2.3.0p32, 2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files...
Web Fraud Attacks against LLM-Driven Multi-Agent Systems
With the proliferation of applications built upon LLM-driven multi-agent systems MAS, the security of Web links has become a critical concern in ensuring system reliability. Once an agent is induced to visit a malicious website, attackers can use it as a springboard to conduct diverse subsequent...
CVE-2025-57814
request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to...
CVE-2025-9578
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40734...
CVE-2025-9681 O2OA Personal Profile agent cross site scripting
A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /xprogramcenter/jaxrs/agent of the component Personal Profile Page. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be use...
CVE-2025-9681 O2OA Personal Profile agent cross site scripting
A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /xprogramcenter/jaxrs/agent of the component Personal Profile Page. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be use...
Linux Distros Unpatched Vulnerability : CVE-2022-46169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a...
Linux Distros Unpatched Vulnerability : CVE-2020-8794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mtaio in mtasession.c for multi-line replies. Although this vulnerabilit...
Linux Distros Unpatched Vulnerability : CVE-2024-9693
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5...
Linux Distros Unpatched Vulnerability : CVE-2023-7045
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this...
Linux Distros Unpatched Vulnerability : CVE-2019-18179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacke...
Linux Distros Unpatched Vulnerability : CVE-2019-9892
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Open Ticket Request System OTRS 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as...
CVE-2025-5187 vulnerabilities
Vulnerabilities for packages: local-static-provisioner, vcluster, mesosphere-vsphere-csi, kubernetes, kubernetes-csi-driver-hostpath, yunikorn-k8shim, rancher-system-agent, kapp, argo-rollouts, ip-masq-agent, kubernetes-csi-driver-nfs, kubernetes-dns-node-cache, docker-machine-driver-harvester,...
MCP SSH Agent 安全漏洞
MCP SSH Agent is an open source Model Context Protocol server for managing and controlling SSH connections from Aionda GmbH. A security vulnerability exists in MCP SSH Agent version 1.0.3 and earlier, which stems from a command injection in the file server-simple.mjs...
CVE-2025-9578
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40734...
CVE-2025-9578
CVE-2025-9578 affects Acronis Cyber Protect Cloud Agent (Windows) prior to build 40734. A local privilege escalation arises from insecure folder permissions in the agent, enabling a non-privileged user to gain higher privileges on the host. The issue is documented across multiple sources (Red Hat...
Missing Password Field Masking
Overview Affected versions of this package are vulnerable to Missing Password Field Masking due to improper handling of process command arguments containing sensitive information. An attacker can obtain confidential data by accessing security event logs where sensitive arguments, such as password...
CVE-2025-58125 Lack of TLS validation in plugin Freebox v6 agent on Checkmk Exchange
Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic...
CVE-2025-58125
CVE-2025-58125 affects the Checkmk Exchange plugin Freebox v6 agent. The root cause is improper certificate validation, enabling attackers in a network MitM position to intercept traffic. Publicly provided documents consistently describe this flaw, with NVD and vendor/third-party feeds listing th...
