266 matches found
cfengine-CVE-2016-2118
+Title: CVE-2016-2118 Inventory and Remediation +SETUPFILE: /src/org-html-themes/setup/theme-readtheorg.setup file:./media/badlock.png This policy detects hosts vulnerable to https://vulners.com/cve/CVE-2016-2118CVE-2016-2118 commonly known as http://badlock.orgBadlock by checking if a known...
cfengine-CVE_2015_0235
CVE20150235 gethostbyname buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability Originally Sourced from Ben Bomgardners post to the help-cfengine mailing list...
CFEngine Hub VCS gitServer injection RCE
OAuth2 admin token then POST /api/vcs/settings injects $cmd into params.sh; execution when masterfiles-stage.sh is sourced hub deploy/cf-agent. !/usr/bin/env python3 -- coding: utf-8 -- """CFEngine Nova Hub VCS settings gitServer command injection.""" from future import annotations import json...
CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE — Detect
Fingerprint / reachability check for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE""" from kittysploit import from...
CLEANSTART-2024-ED61201 Northern
Security vulnerability affects the cfengine package. Northern...
CVE-2026-24710
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS...
CVE-2026-33553
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
Linux Distros Unpatched Vulnerability : CVE-2026-24712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection. CVE-2026-24712 Note that Nessus relies on the presen...
EUVD-2026-34019
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
CVE-2026-33553
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
CVE-2026-33553
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
CVE-2026-33553: Improper Neutralization of Input During Web Page Generation
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
Northern.tech CFEngine Enterprise Cross-site Scripting Vulnerabilities
Northern.tech CFEngine Enterprise is a multi-functional solution from Northern.tech company, designed for automatically performing daily tasks. There were security vulnerabilities in versions 3.24.3 to 3.24.4 and 3.27.0 to 3.27.1 of Northern.tech CFEngine Enterprise, which stemmed from cross-site...
CVE-2026-33553
The Northern.tech CFEngine Enterprise software is affected by a Cross-Site Scripting (XSS) vulnerability. The issue specifically impacts versions 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 . The vulnerability arises from the improper neutralization of input during web page generation . Exploit...
PT-2026-45827
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
CVE-2026-33553
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
CVE-2026-33553
Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS...
CVE-2026-24712
Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection...