201143 matches found
CVE-2020-0601
CVE-2020-0601 このスクリプトは、お使いのWindowsのバージョンに応じて、CVE-2020-0601の修正プログラムが適用されているかどうかをチェックします。 さらに、既知の脆弱性を悪用しようとする試みがあるかどうかもチェックします。 この.xmlファイルはControlUpユーザー向けです。 通常どおり、XMLファイルをScript（ベース）Actionsにインポートしてください。 すべての情報はこちらで確認できます：...
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
Jellyfin <10.7.0 - Local File Inclusion
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...
Magento - SQL Injection
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. id: CVE-2019-7139 info: name: Magento - SQL Injection author: MaStErChO severity: critical description: | An unauthenticated user can execute SQL...
tshirtecommerce PrestaShop Module - SQL Injection
The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the tshirtecommercedesigncartid parameter, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. This is due to lack of input sanitization, as shown in t...
DEBIAN-CVE-2026-61552
Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...
study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095
Struts2의 취약성 S2-054, S2-055 및 Jackson의 취약성 CVE-2017-7525, CVE-2017-15095 조사 보고 요점만 정리하여 읽기 쉽게 만든 요약 기사를 공개했습니다. 먼저 개요를 알고 싶거나 시간이 없는 분들께 추천합니다. SSTtechlog 08 S2-054, S2-055 및 jackson-databind의 취약성 CVE-2017-7525, CVE-2017-15095에 대해 | SST 주식회사 시큐어스카이 테크놀로지...
[SECURITY] [DSA 6506-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6506-1 [email protected] https://www.debian.org/security/ Andres Salomon September 17, 2026 https://www.debian.org/security/faq -...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (Spyre)
Red Hat AI Base Images 3.3.3 Spyre is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
CVE-2026-41940-Security-Patch
CVE-2026-41940-Security-Patch CVE-2026-41940の脆弱性に対する非公式の暫定パッチ 一時的な防御に使用できます 条件が許す限り、できるだけ早く公式の正式版へアップグレードしてください cPanelセキュリティ勧告：https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026 この脆弱性の詳細については、このウェブサイトをご覧ください...
ROOT-OS-ALPINE-321-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-14017 CVE-2025-14017 in curl - Patched by Root
Root has patched CVE-2025-14017 in the curl package for Root:Debian:12. Multiple fixed versions available...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Multicluster Global Hub 1.8.2 security update
Multicluster Global Hub v1.8.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
[SECURITY] Fedora 43 Update: roundcubemail-1.6.19-1.fc43
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
openssl security update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447...