835 matches found
EUVD-2025-22380
Malicious code in bioql PyPI...
CVE-2022-29037
Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2021-43806
Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositories. A authenticated malicious user with...
CVE-2010-1326
perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...
CVE-2004-1343
CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...
CVE-2004-1342
CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method...
AlmaLinux 9 : firefox (ALSA-2025:2359)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:2359 advisory. firefox: Use-after-free in WebTransportChild CVE-2025-1931 firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process CVE-2025-193...
rsync security update
An update is available for rsync. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsync utility enables the users to copy and synchronize files locally or...
Ubuntu: Security Advisory (USN-7343-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHSA-2004:190 Red Hat Security Advisory: cvs security update
Bulletin has no description...
RHSA-2005:387 Red Hat Security Advisory: cvs security update
Bulletin has no description...
RHSA-2012:0321 Red Hat Security Advisory: cvs security update
Bulletin has no description...
RHSA-2010:0918 Red Hat Security Advisory: cvs security update
Bulletin has no description...
RHSA-2005:756 Red Hat Security Advisory: cvs security update
Bulletin has no description...
RHSA-2004:233 Red Hat Security Advisory: cvs security update
Bulletin has no description...
RHSA-2004:153 Red Hat Security Advisory: cvs security update
Bulletin has no description...
RHSA-2004:004 Red Hat Security Advisory: cvs security update
Bulletin has no description...
OPENSUSE-SU-2024:10504-1 cvs-1.12.12-183.10 on GA media
These are all security issues fixed in the cvs-1.12.12-183.10 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10708-1 cvs-1.12.13-1.14 on GA media
These are all security issues fixed in the cvs-1.12.13-1.14 package on the GA media of openSUSE Tumbleweed...
RHEL 5 : cvs (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cvs: Command injection via malicious ssh URLs CVE-2017-12836 Note that Nessus has not tested for this issue but has...