Vulnerabilities in Citrix Netscaler ADC and Netscaler Gateway

Citrix has identified vulnerabilities in NetScaler ADC and NetScaler Gateway that are related to inadequate input validation, incorrect access control, and improper memory release. The vulnerabilities, identified as CVE-2026-8451 and CVE-2026-10817, arise from inadequate input validation, where t...

Ericsson Packet Core Gateway 安全漏洞

Ericsson Packet Core Gateway is a data packet gateway platform for mobile communication core networks developed by the Swedish company Ericsson. Versions of Ericsson Packet Core Gateway prior to version 1.30 contained security vulnerabilities. These vulnerabilities stemmed from improper handling ...

Altice Labs GR140DG和Altice Labs GR140IG 安全漏洞

Both Altice Labs GR140DG and Altice Labs GR140IG are fiber-optic access gateway devices from the Portuguese company Altice Labs. Both devices have security vulnerabilities. The vulnerability stems from the traceroute diagnostic handler in /bin/httpdclientside, which allows uncleaned user input to...

A Systematic Taxonomy of Security Vulnerabilities in the OpenClaw AI Agent Framework

AI agent frameworks connecting large language model LLM reasoning to host execution surfaces--shell, filesystem, containers, and messaging--introduce security challenges structurally distinct from conventional software. We present a systematic taxonomy of 190 advisories filed against OpenClaw, an...

CVE-2020-10112

Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Citrix Gateway usage. No dynamic content is served under these paths, which implies that those cached...

EUVD-2017-15964

Malware in sbrugna...

EUVD-2018-12245

Malware in sbrugna...

EUVD-2023-57571

Malicious code in bioql PyPI...

Vulnerabilities fixed in Zenitel ICX500 and ICX510 gateway

Zenitel has fixed vulnerabilities in the ICX500 and ICX510 gateway products. The vulnerabilities allow malicious parties to gain unauthorized access to the Billing Admin endpoint and execute arbitrary commands on the device. This can lead to serious compromise of device availability,...

CVE-2019-0319

The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not...

Oracle Primavera Gateway (Apr 2025 CPU)

The versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2025 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin Google Protobuf-Java. Supported versions...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: skopeo, nsc, restic, glow, osv-scanner, controller-gen, redka, s5cmd, helm, linkerd2-proxy-init, govulncheck, cni-plugins, actions-runner-controller, harbor-scanner-trivy, k8ssandra-client, k8s-device-plugin, aws-load-balancer-controller, aws-privateca-issuer,...

GHSA-J777-63HF-HX76 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GHSA-Q2X7-8RV6-6Q7H vulnerabilities

Vulnerabilities for packages: dask-gateway, kserve, kubeflow-volumes-web-app, mlflow, checkov, emissary, py3-jinja2, superset, airflow, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, reflex...

GHSA-GMJ6-6F8F-6699 vulnerabilities

Vulnerabilities for packages: dask-gateway, kserve, kubeflow-volumes-web-app, mlflow, checkov, emissary, py3-jinja2, superset, airflow, kubeflow-jupyter-web-app, reflex...

CVE-2024-56326 vulnerabilities

Vulnerabilities for packages: dask-gateway, kserve, kubeflow-volumes-web-app, mlflow, checkov, emissary, py3-jinja2, superset, airflow, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, reflex...

CVE-2024-56201 vulnerabilities

Vulnerabilities for packages: dask-gateway, kserve, kubeflow-volumes-web-app, mlflow, checkov, emissary, py3-jinja2, superset, airflow, kubeflow-jupyter-web-app, reflex...

GHSA-JWHX-XCG6-8XHJ vulnerabilities

Vulnerabilities for packages: kserve, dask-gateway, nemo, airflow, checkov, py3-cassandra-medusa, request-1276...

HPESBNW04454 rev.5 - HPE Aruba Networking Controller and Gateway-Based AOS Multiple Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS; Remote: Arbitrary Code Execution, Arbitrary Command Execution, Arbitrary File Deletion, Disclosure of Sensitive Information, Unauthorized Arbitrary Command Execution, Buffer Overflow, Session Reuse SUPPORTED SOFTWARE VERSIONS: ONLY...

PT-2020-6445 · Citrix · Citrix Adc +2

Name of the Vulnerable Software and Affected Versions: Citrix ADC versions prior to 13.0-58.30 Citrix ADC versions prior to 12.1-57.18 Citrix ADC versions prior to 12.0-63.21 Citrix ADC versions prior to 11.1-64.14 Citrix ADC versions prior to 10.5-70.18 Citrix Gateway versions prior to 13.0-58.3...