262 matches found
CVE-2026-24712: Improper Neutralization of Special Elements used in a Command
Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection...
CVE-2026-24711: Improper Access Control
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control...
CVE-2026-24710: Improper Neutralization of Input During Web Page Generation
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS...
CVE-2026-24712
Northern.tech CFEngine Enterprise and Community versions prior to 3.21.8 , 3.24.3 , and 3.27.0 are vulnerable to Command injection . While the technical root cause is not explicitly detailed in the provided documents, the vulnerability could allow an attacker to execute arbitrary commands on the ...
PT-2026-40930
Name of the Vulnerable Software and Affected Versions CFEngine Enterprise versions prior to 3.21.8 CFEngine Enterprise versions prior to 3.24.3 CFEngine Enterprise versions prior to 3.27.0 Description Incorrect access control allows cross-site scripting XSS, a technique where malicious scripts ar...
CVE-2026-24710
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS...
PT-2026-40929
Name of the Vulnerable Software and Affected Versions CFEngine Enterprise versions prior to 3.21.8 CFEngine Enterprise versions prior to 3.24.3 CFEngine Enterprise versions prior to 3.27.0 Description Cross-site Scripting XSS is possible in the software, which allows an attacker to inject malicio...
CVE-2026-24712
Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection...
CVE-2026-24712
Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection...
CVE-2026-24710
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS...
CVE-2026-24710
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS...
CVE-2023-45684
Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub...
CVE-1999-0374
Debian GNU/Linux cfengine package is susceptible to a symlink attack...
EUVD-2004-1696
Malware in sbrugna...
EUVD-2000-0934
Malware in sbrugna...
EUVD-2005-2960
Malware in sbrugna...
EUVD-2005-3137
Malware in sbrugna...
EUVD-2003-0840
Malware in sbrugna...