EUVD-2021-33043

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-12483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscoveranalyser rzo GET...

Linux Distros Unpatched Vulnerability : CVE-2018-14473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacker sending a crafte...

Linux Distros Unpatched Vulnerability : CVE-2018-12482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues. CVE-2018-12482 Note that...

Linux Distros Unpatched Vulnerability : CVE-2020-14947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mibfile in...

Linux Distros Unpatched Vulnerability : CVE-2018-1000557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting XSS vulnerability in login form and search functionality that can result i...

Linux Distros Unpatched Vulnerability : CVE-2014-4722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or...

Linux Distros Unpatched Vulnerability : CVE-2018-1000558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An...

Command Execution Vulnerability in Cube OCS Management System of Hangzhou Cube Holding Co.

Cube OCS Management System is an access control management platform, mainly used for enterprise production management and access control scenarios. A command execution vulnerability exists in the Cube OCS Management System of Hangzhou Cube Holding Company Limited, which can be exploited by an...

CVE-2021-37629

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limiting on the Richdocuments OCS endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. It is recommended that the Nextcloud Richdocuments app is...

CVE-2020-14947

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mibfile in plugins/mainsections/msconfig/mssnmpconfig.php is mishandled in getmiboid...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

RHSA-2020:4143 Red Hat Security Advisory: OCS 3.11.z async security, bug fix, and enhancement update

Bulletin has no description...

USN-6914-1 ocsinventory-server vulnerability

Filip Hejsek discovered that the phpCAS library included in OCS Inventory was using HTTP headers to determine the service URL used to validate tickets. A remote attacker could possibly use this issue to gain access to a victim's account...

USN-6914-1: OCS Inventory vulnerability

Filip Hejsek discovered that the phpCAS library included in OCS Inventory was using HTTP headers to determine the service URL used to validate tickets. A remote attacker could possibly use this issue to gain access to a victim's account...

Ubuntu 22.04 LTS : OCS Inventory vulnerability (USN-6914-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6914-1 advisory. Filip Hejsek discovered that the phpCAS library included in OCS Inventory was using HTTP headers to determine the service URL used to validate tickets. A remote...

Ocs Inventory Cross-Site Scripting Vulnerability

Ocs Inventory is an asset management solution from Ocs. enabling users to inventory It assets. A cross-site scripting vulnerability exists in Ocs Inventory that stems from allowing the storage of email templates with special characters, which leads to stored cross-site scripting...

CVE-2023-40922

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...

CVE-2023-40922

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...