Lucene search
+L

28 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/18 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-32633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the /api/4/serverslist endpoint returns raw...

9.1CVSS6.2AI score0.00472EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/03/18 12:00 a.m.21 views

glances 安全漏洞

Glances is a system monitoring tool developed by Nicolas Hennion. Versions of Glances prior to 4.5.2 contained security vulnerabilities. These vulnerabilities stemmed from the Central Browser mode, where the/api/4/serverslist endpoint returned server objects without authentication, containing...

9.1CVSS5.8AI score0.00472EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-32634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised...

8.1CVSS6AI score0.00282EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/03/18 12:00 a.m.28 views

glances 安全漏洞

Glances is a system monitoring tool developed by Nicolas Hennion. Versions of Glances prior to 4.5.2 contained security vulnerabilities. These vulnerabilities stemmed from the use of untrusted advertisement names to construct connection URIs and retrieve keys under the Central Browser mode. This...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/03/16 4:36 p.m.16 views

Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Summary In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself as protected, Glances...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/03/16 4:36 p.m.9 views

GHSA-VX5F-957P-QPVM Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Summary In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself as protected, Glances...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.11 views

PT-2026-25820

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.2 Description Glances, an open-source system cross-platform monitoring tool, contains a critical issue in its Central Browser mode. The /api/4/serverslist endpoint returns raw server objects that can contain...

9.4CVSS5.8AI score0.00472EPSS
SaveExploits1References38
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.6 views

PT-2026-25821

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.2 Description Glances, a system cross-platform monitoring tool, contains a flaw in Central Browser mode. The software stores both the Zeroconf-advertised server name and the discovered IP address for dynamic...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References28
Rows per page
Query Builder