6366 matches found
AZL-58440 CVE-2025-22870 affecting package telegraf for versions less than 1.29.4-15
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
CVE-2025-22870
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
CVE-2025-22870
The golang.org/x/net library (specifically affecting the Go programming language) contains a vulnerability where matching hosts against proxy patterns may improperly treat an IPv6 zone ID as a hostname component. This misinterpretation can cause requests to be incorrectly matched and bypass proxy...
CVE-2025-22870
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
CVE-2025-22870
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
Arbitrary Command Injection
Overview basicsr is an Open Source Image and Video Super-Resolution Toolbox Affected versions of this package are vulnerable to Arbitrary Command Injection through the execution of scontrol show hostname in an environment where the SLURMNODELIST variable is manipulated. Remediation There is no...
PT-2025-11079
Name of the Vulnerable Software and Affected Versions: XPixelGroup BasicSR versions 1.4.2 and earlier Description: The issue might locally allow code execution in specific situations where scontrol show hostname is executed with a crafted SLURM NODELIST environment variable. Recommendations: For...
Google Go 安全漏洞
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google USA. A security vulnerability exists in Google Go that stems from an IPv6 region ID being incorrectly treated as part of a hostname, which could result in a proxy matching error...
SUSE-SU-2025:20229-1 Security update for pam
This update for pam fixes the following issues: - CVE-2024-10963: Fixed improper hostname interpretation inpamaccess that could lead to access control bypass bsc1233078...
Security update for pam
This update for pam fixes the following issues: CVE-2024-10963: Fixed improper hostname interpretation inpamaccess that could lead to access control bypass bsc1233078 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
Linux Distros Unpatched Vulnerability : CVE-2024-24806
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libuv is a multi-platform support library with a focus on asynchronous I/O. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its windows counterpart...
Linux Distros Unpatched Vulnerability : CVE-2020-7942
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate...
Linux Distros Unpatched Vulnerability : CVE-2022-45197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp. CVE-2022-45197...
Linux Distros Unpatched Vulnerability : CVE-2015-1855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - verifycertificateidentity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate...
Linux Distros Unpatched Vulnerability : CVE-2015-1777
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rhnregks in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Gluster Storage 2.1 and Enterprise Linux RHEL 5, 6, and 7 does not properly validate...
K000149845: pam_access vulnerability CVE-2024-10963
Security Advisory Description A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for...
CLSA-2025-1739821812 php: Fix of 3 CVEs
CVE-2024-8925: fix erroneous parsing of multipart form data contained in an HTTP POST request - CVE-2024-9026: fix log tampering in PHP-FPM - CVE-2024-5458: fix early-out for ipv6 hostname validation, ensure full check is performed...
CLSA-2025-1739388106 libevent: Fix of 3 CVEs
CVE-2016-10195: fix an out-of-bounds stack read in the nameparse function - CVE-2016-10196: fix a stack-based buffer overflow in the evutilparsesockaddrport function - CVE-2016-10197: fix DoS via an empty hostname in the searchmakenew function...
The vulnerability of the TCP_Server_Info::hostname() function in the fs/smb/client/connect.c module of operating system kernels on Linux allows a hacker to cause a service failure.
The vulnerability of the TCPServerInfo::hostname function in the fs/smb/client/connect.c module of Linux operating systems is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
