Ubuntu 16.04 LTS : Apache Subversion vulnerability (USN-7818-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7818-1 advisory. It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted...

Cross-site Scripting (XSS)

Overview qwc2-lts is a QGIS Web Client Affected versions of this package are vulnerable to Cross-site Scripting XSS via multiple components, including ServiceInfoWindow, SearchBox, LayerInfoWindow, and others. An attacker can execute arbitrary JavaScript code in the context of the user's browser ...

[SECURITY] [DLA 4327-1] linux security update

Debian LTS Advisory DLA-4327-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings October 13, 2025 https://wiki.debian.org/LTS Package : linux Version : 5.10.244-1 CVE ID : CVE-2021-46987 CVE-2021-47037 CVE-2021-47070 CVE-2021-47076 CVE-2021-47183 CVE-2021-47193...

Debian dla-4329 : libfcgi-bin - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4329 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4329-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : WebKitGTK vulnerabilities (USN-7817-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7817-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

USN-7814-1 libhtp vulnerabilities

It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2024-23837 It was discovered that LibH...

USN-7814-1: LibHTP vulnerabilities

It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2024-23837 It was discovered that LibH...

[SECURITY] [DLA 4324-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4324-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 07, 2025 https://wiki.debian.org/LTS -...

Debian dla-4324 : python-django-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4324 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4324-1 [email protected]...

CVE-2025-43907

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Path Traversal:...

EUVD-2020-29675

Malware in sbrugna...

EUVD-2021-19392

Malware in sbrugna...

EUVD-2020-7694

Malware in sbrugna...

EUVD-2020-28115

Malware in sbrugna...

EUVD-2021-0819

Malware in sbrugna...

EUVD-2021-0845

Malware in sbrugna...

EUVD-2006-3592

Malware in sbrugna...

EUVD-2016-2351

Malware in sbrugna...

Dell PowerProtect Data Domain 加密问题漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. An encryption issue vulnerability exists in Dell PowerProtect Data Domain that stems from the use of flawed or dangerous encryption algorithm...

CVE-2025-54293

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links...