EUVD-1999-1264

Malware in sbrugna...

EUVD-2020-24562

Malware in sbrugna...

EUVD-2018-12053

Malware in sbrugna...

EUVD-2009-4169

Malware in sbrugna...

EUVD-2011-2356

Malware in sbrugna...

EUVD-2015-6682

Malware in sbrugna...

ROS-20250619-12

The vulnerability of Pgpool-II connection balancing and management software tools is related to errors of input validation errors when processing directory traversal sequences in filenames. Exploitation exploitation of the vulnerability could allow a remote attacker to perform directory traversal...

CVE-2018-25031

Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be resolved in 4.1.3. However, third parti...

CVE-2025-28401

CVE-2025-28401 concerns RUoYi v4.8.0. The vulnerability allows a remote attacker to escalate privileges via the menuId parameter. The PT-2025-15239 advisory provides a workaround: restrict access to the vulnerable menuId parameter until a patch is available; there is no confirmed fix version in t...

USN-7395-1: WebKitGTK vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

Microsoft Edge (Chromium) < 134.0.3124.66 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.66. It is, therefore, affected by multiple vulnerabilities as referenced in the March 12, 2025 advisory. - Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perfor...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : WebKitGTK vulnerabilities (USN-7279-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7279-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : WebKitGTK vulnerabilities (USN-7142-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7142-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

USN-7132-1: PostgreSQL vulnerabilities

It was discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. CVE-2024-10976 Jacob Champion discovered that PostgreSQL clients used untrusted server error messages. An attacker that is...

Microsoft Edge (Chromium) < 131.0.2903.48 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 131.0.2903.48. It is, therefore, affected by multiple vulnerabilities as referenced in the November 14, 2024 advisory. - Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remo...

Microsoft Edge (Chromium) < 130.0.2849.80 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 130.0.2849.80. It is, therefore, affected by multiple vulnerabilities as referenced in the November 7, 2024 advisory. - Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a...

Cisco Firepower Management Center WEB Management Cross-Site Scripting Vulnerability

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Cisco Firepower Management Center WEB interface, which can be exploited by a remote attacker to inject malicious scrip...

Cisco Integrated Management Controller Open Redirect Vulnerability (CNVD-2021-37694)

Cisco Integrated Management Controller IMC is a U.S. Cisco Cisco for server management monitoring integrated management software. An open redirection vulnerability exists in Cisco Integrated Management Controller, which can be exploited by remote attackers to redirect users to a malicious web pag...

SUSE-SU-2018:1401-2 Security update for icu

icu was updated to fix two security issues. These security issues were fixed: - CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

SUSE-SU-2016:0839-1 Security update for tomcat6

This update for tomcat6 fixes the following issues: The version was updated from 6.0.41 to 6.0.45. Security issues fixed: CVE-2015-5174: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat allowed remote authenticated users to bypass intended SecurityManager restrictions and li...