12350 matches found
CVE-2025-71210
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via...
CVE-2025-71210
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via...
CVE-2025-71210
CVE-2025-71210 affects the Trend Micro Apex One management console. The connected sources describe a path traversal vulnerability in the console that could allow a remote attacker to upload and execute code, with exploitation possible when an attacker has access to the console. Affected products ...
CVE-2025-71210
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via...
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an employee device involving a poisoned version of the Nx Console Microsoft Visual Studio Code VS Code extension. The development comes as the Nx team revealed that the extensio...
Trend Micro Apex One 路径遍历漏洞
Trend Micro Apex One is a terminal protection software developed by Trend Micro, a US-based company. Trend Micro Apex One has a path traversal vulnerability, which originates from the management console. This vulnerability could allow remote attackers to upload malicious code and execute commands...
Trend Micro Apex One 路径遍历漏洞
Trend Micro Apex One is a terminal protection software developed by Trend Micro, a US-based company. Trend Micro Apex One has a path traversal vulnerability, which originates from the management console. This vulnerability could allow remote attackers to upload malicious code and execute commands...
Exploit for CVE-2026-2587
CVE-2026-2587 — GlassFish EL Injection RCE...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: pulumi, pulumi-language-java, kargo, xeol-fips, trivy, argo-cd-fips, skaffold-fips, rancher-fleet, trufflehog-fips, gitea, zarf-fips, argo-events-fips, gitaly-fips, gitlab-runner-fips, zarf, tfsec, kubescape, grype-db, xeol, zot, gitaly, melange, skaffold,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: pulumi, pulumi-language-java, kargo, xeol-fips, trivy, argo-cd-fips, skaffold-fips, rancher-fleet, trufflehog-fips, gitea, zarf-fips, argo-events-fips, gitaly-fips, gitlab-runner-fips, zarf, tfsec, kubescape, grype-db, xeol, zot, gitaly, melange, skaffold,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: pulumi, pulumi-language-java, kargo, xeol-fips, trivy, argo-cd-fips, skaffold-fips, rancher-fleet, trufflehog-fips, gitea, zarf-fips, argo-events-fips, gitaly-fips, gitlab-runner-fips, zarf, tfsec, kubescape, grype-db, xeol, zot, gitaly, melange, skaffold,...
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' in the admin console endpoints such as /web/configuration/virtualServerEdit.jsf. An attacker can execute arbitrary syst...
Astra Linux - уязвимость в linux-5.10, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: tty: fixed an out-of-bounds access in ttydriverlookuptty When specifying an invalid console= device like console=tty3270, ttydriverlookuptty returns the tty struct without checking whether the index is a valid number. To reproduc...
Astra Linux - уязвимость в linux-5.10, linux
In the Linux kernel, the following vulnerability has been resolved: vt: Clear the selection before changing the font When changing the console font using ioctlKDFONTOP, the new font size may be larger than the previous one. As a result, a previously selected text may now be displayed outside the...
Astra Linux - уязвимость в ansible
A flaw was discovered in the ansible module, where credentials are disclosed in the console logs by default, and are not protected by security features when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucket Pipeline credentials. The greatest threat posed ...
Astra Linux – Vulnerability in Ansible
A flaw was discovered in Ansible. Credentials, such as secrets, are being disclosed in the console logs by default, and are not protected by the nolog feature when those modules are used. An attacker can exploit this information to steal those credentials. The greatest threat posed by this...
Astra Linux - уязвимость в linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerabilities have been resolved: serial/pmaczilog: Removed the flawed mitigation for rx irq flood. The mitigation was intended to completely stop the irq. This might be better than using a hard lock-up, but it turns out that a crash still occurs if pmaczilog ...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: netconsole: Avoid out-of-band OOB reads; the message is not terminated with nul. The message passed to netconsole from the console subsystem is not guaranteed to be terminated with nul. Before the recent commit 7eab73b18630...
Astra Linux - уязвимость в linux, linux-5.10
Rogue backends can cause Denial of Service DoS attacks on guests through high-frequency events. This CNA information record relates to multiple Common Vulnerabilities and Exposures CVEs; the text explains which aspects/vulnerabilities correspond to which CVEs. Xen allows for the execution of PV...
Astra Linux - уязвимость в h2database
The H2 Console before version 2.1.210 allowed remote attackers to execute arbitrary code through a jdbc:h2:mem JDBC URL that contained the IGNOREUNKNOWNSETTINGS=TRUE;FORBID CREATION=FALSE;INIT=RUNSCRIPT substring. This is a different vulnerability than CVE-2021-42392. source-iocs-preserved...