10545 matches found
Debian dla-4412 : libglib2.0-0 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4412 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4412-1 [email protected]...
Debian dla-4411 : libgd-dev - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4411 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4411-1 [email protected]...
Debian dla-4410 : binwalk - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4410 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4410-1 [email protected] https://www.debian.org/lts/security/...
Ubuntu: Security Advisory (USN-7930-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS : Linux kernel (KVM) vulnerabilities (USN-7933-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7933-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation betwee...
Debian dla-4408 : python-apt-common - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4408 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4408-1 [email protected] https://www.debian.org/lts/security/...
Debian dla-4406 : ruby-git - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4406 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4406-1 [email protected]...
Cross-site Scripting (XSS)
Magento-lts is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to unescaped translation strings and URLs rendered in the admin notification grid, which allows an attacker with database or feed access to inject malicious scripts into vulnerable fields...
[SECURITY] [DLA 4404-1] linux security update
Debian LTS Advisory DLA-4404-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings December 12, 2025 https://wiki.debian.org/LTS Package : linux Version : 5.10.247-1 CVE ID : CVE-2023-53498 CVE-2024-47666 CVE-2024-50143 CVE-2024-57947 CVE-2025-21861 CVE-2025-21887...
BIT-JENKINS-2025-67639
A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...
BIT-JENKINS-2025-67635
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...
CVE-2025-67639
A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...
CVE-2025-67639
A cross-site request forgery CSRF vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account...
[SECURITY] [DLA 4400-1] rear security update
Debian LTS Advisory DLA-4400-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert December 10, 2025 https://wiki.debian.org/LTS Package : rear Version : 2.6+dfsg-1+deb11u1 CVE ID : CVE-2024-23301 Debian Bug : 1060747 It has been discovered that Relax-and-Recover aka...
PT-2025-50357
Name of the Vulnerable Software and Affected Versions Jenkins versions 2.540 and earlier Jenkins LTS versions 2.528.2 and earlier Description A cross-site request forgery CSRF issue exists in Jenkins that could allow an attacker to trick users into logging in to the attacker’s account. A CSRF...
Debian dla-4400 : rear - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4400 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4400-1 [email protected] https://www.debian.org/lts/security/...
PT-2025-50353
Name of the Vulnerable Software and Affected Versions Jenkins versions 2.540 and earlier Jenkins LTS versions 2.528.2 and earlier Description Jenkins does not properly close HTTP-based CLI connections when the connection stream becomes corrupted. This can allow unauthenticated attackers to cause ...
Debian dla-4399 : gir1.2-javascriptcoregtk-4.0 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4399 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4399-1 [email protected]...
Debian dla-4398 : gir1.2-soup-2.4 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4398 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4398-1 [email protected]...
The vulnerability of the users.shtm file in the multi-platform web solution for creating Scada systems, Scada-LTS, allows a hacker to perform cross-site scripting attacks (XSS).
The vulnerability of the users.shtm file in the multi-platform web solution for creating Scada systems is related to the lack of protection for the website structure when processing the Username parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...