1963 matches found
CVE-2025-54889 A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring SNMP traps manufacturer configuration modules allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13...
PT-2025-41932
Name of the Vulnerable Software and Affected Versions Centreon Infra Monitoring versions 23.10.0 through 23.10.28 Centreon Infra Monitoring versions 24.04.0 through 24.04.18 Centreon Infra Monitoring versions 24.10.0 through 24.10.13 Description The software contains a flaw related to improper...
Linux Distros Unpatched Vulnerability : CVE-2025-11561
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos...
EUVD-2025-33776
Emlog is an open source website building system. Emlog Pro versions 2.5.19 and earlier are vulnerable to Cross‑Site Request Forgery CSRF on the password change endpoint. An attacker can trick a logged‑in administrator into submitting a crafted POST request to change the admin password without...
CVE-2025-62292: Incorrect Resource Transfer Between Spheres
In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and obtain user fields intended for administrators only, including the email addresses of other accounts...
CVE-2025-62292
In SonarQube, versions before 25.6 (including 2025.3 Commercial and 2025.1.3 LTA) allow authenticated low-privilege users to query /api/v2/users-management/users and obtain administrator-only fields, notably email addresses of other accounts. This is the underlying vulnerability described across ...
HAProxy Kubernetes Ingress Controller 安全漏洞
HAProxy Kubernetes Ingress Controller is a reverse proxy and load balancing tool from US-based HAProxy Inc. A security vulnerability exists in HAProxy Kubernetes Ingress Controller versions prior to 3.1.13, which stems from the configuration snippet feature accepting a configuration snippet from ...
EUVD-2017-0021
Malware in sbrugna...
EUVD-2021-12806
Malware in sbrugna...
EUVD-2021-24797
Malware in sbrugna...
EUVD-2018-18715
Malware in sbrugna...
EUVD-2021-16226
Malware in sbrugna...
EUVD-2020-25896
Malware in sbrugna...
EUVD-2021-22906
Malware in sbrugna...
EUVD-2021-24872
Malware in sbrugna...
EUVD-2012-4818
Malware in sbrugna...
EUVD-2019-13391
Malware in sbrugna...
EUVD-2021-25515
Malware in sbrugna...