EUVD-2017-11809

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-2661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new...

RHEL 7 : pcs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - rubygem-json: Unsafe object creation vulnerability in JSON CVE-2020-10663 - ClusterLabs pcs before versio...

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

CVE-2017-2661

CVE-2017-2661 affects ClusterLabs pcs before version 0.9.157, which is vulnerable to a cross-site scripting (XSS) vulnerability caused by improper validation of the Node name field when creating a new cluster or adding an existing cluster. This is supported by multiple connected sources noting XS...

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

PT-2018-7164 · Clusterlabs · Pcs

Name of the Vulnerable Software and Affected Versions: ClusterLabs pcs versions prior to 0.9.157 Description: The issue arises from improper validation of the Node name field when creating a new cluster or adding an existing cluster, leading to a cross-site scripting vulnerability. Recommendation...