13672 matches found
CVE-2026-2249
METIS DFS devices expose an unauthenticated web-based shell at /console, allowing remote command execution with daemon privileges on affected versions (
CVE-2026-2249
METIS DFS devices versions = oscore 2.1.234-r18 expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with 'daemon' privileges. This results in the compromise of the...
[SECURITY] Fedora 42 Update: rust-sigul-pesign-bridge-0.5.0-3.fc42
Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server...
[SECURITY] Fedora 42 Update: rust-speakersafetyd-1.0.2-6.fc42
Speaker protection daemon for embedded Linux systems...
[SECURITY] Fedora 42 Update: rust-sequoia-keystore-server-0.2.0-6.fc42
Sequoia keystore daemon...
[SECURITY] Fedora 42 Update: rust-monitord-0.12.1-6.fc42
monitord is a library and daemon to gather statistics about systemd...
[SECURITY] Fedora 42 Update: greetd-0.10.3-6.fc42
greetd is a minimal and flexible login manager daemon that makes no assumptions about what you want to launch...
PT-2026-7598
METIS DFS devices versions = oscore 2.1.234-r18 expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with 'daemon' privileges. This results in the compromise of the...
METIS DFS 安全漏洞
METIS DFS is a data processing software developed by the Greek company METIS. Versions of METIS DFS 2.1.234-r18 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the /console endpoint, which exposed a web-based shell without authentication requirements. This could...
CVE-2026-25506
MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon to leak cryptographic key material from process memory. With the leaked key material, the...
CVE-2026-0966
The API function sshgethexa is vulnerable, when 0-lenght input is provided to this function. This function is used internally in sshgetfingerprinthash and sshprinthexa deprecated, which is vulnerable to the same input length is provided by the calling application. The function is also used...
CVE-2026-25506
MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon to leak cryptographic key material from process memory. With the leaked key material, the...
CVE-2026-25506 MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery
MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon to leak cryptographic key material from process memory. With the leaked key material, the...
[SECURITY] Fedora 43 Update: rust-speakersafetyd-1.0.2-6.fc43
Speaker protection daemon for embedded Linux systems...
[SECURITY] Fedora 43 Update: rust-sigul-pesign-bridge-0.5.0-3.fc43
Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server...
[SECURITY] Fedora 43 Update: greetd-0.10.3-6.fc43
greetd is a minimal and flexible login manager daemon that makes no assumptions about what you want to launch...
ROS-20260209-73-0026
A vulnerability in the snmptrapd daemon of the Net-SNMP SNMP deployment and utilization software suite is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by sending a specially craft...
SUSE CVE-2026-23093
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dmaunmapsg nents The dmaunmapsg functions should be called with the same nents as the dmamapsg, not the value the map function returned...
