SUSE CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

NewStart CGSL MAIN 7.02 : sudo Multiple Vulnerabilities (NS-SA-2025-0246)

The remote NewStart CGSL host, running version MAIN 7.02, has sudo packages installed that are affected by multiple vulnerabilities: - Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user- controlled directory is used with the --chroot option...

Malicious code in metronome-synth-user-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b163cd49732602b28b6b142d2a9713bec7f4ce6d9a63d09bf334c2415c8829b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Juniper Networks Junos OS Evolved 授权问题漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved suffers from an authorization issue vulnerability that arises from improper authorization in the "sysmanctl" shell command, which could be exploited by an attacker to execute...

AZL-11115 CVE-2022-42717 affecting package packer for versions less than 1.8.7-1

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute...

PT-2011-2778 · Cisco · Cisco Unified Operations Manager

Name of the Vulnerable Software and Affected Versions: Cisco Unified Operations Manager CUOM versions prior to 8.6 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the CCMs parameter to the "/iptm/PRTestCreation.do" API endpoint or the ccm...

PT-2009-2950 · Flax · Flax Article Manager

Name of the Vulnerable Software and Affected Versions: Flax Article Manager version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter in the category.php file. Recommendations: For Flax Article Manager version 1.1,...