ConnectWise PSA security vulnerabilities

ConnectWise PSA is a professional service automation software developed by ConnectWise in the United States. Versions of ConnectWise PSA prior to 2026.1 contained security vulnerabilities. These vulnerabilities stemmed from the lack of output encoding for Time Entry notes in the Time Entry Audit...

MiracleLinux 7 : firefox-52.7.0-1.0.1.el7.AXS7 (AXSA:2018-2624:02)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-2624:02 advisory. Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 MFSA 2018-07 CVE-2018-5125 Mozilla: Buffer overflow manipulating SVG...

WeGIA security vulnerabilities

WeGIA is a network manager for welfare institutions developed by Nilson Lazarin as an individual project. Versions of WeGIA prior to 3.6.2 contained security vulnerabilities; these vulnerabilities stemmed from the lack of defensive HTTP headers, which could lead to clickjacking attacks...

Pepr security vulnerabilities

Pepr is a middleware open source by Defense Unicorns. Versions of Pepr prior to 1.0.5 contained security vulnerabilities. These vulnerabilities stemmed from the default use of RBAC configuration for cluster administrators, without enforcing the principle of least privilege...

MiracleLinux 7 : gstreamer-plugins-bad-free-0.10.23-22.el7 (AXSA:2017-1229:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1229:01 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested...

MiracleLinux 4 : btparser-0.17-1.AXS4, abrt-2.0.8-15.0.1.AXS4, libreport-2.0.9-15.0.2.AXS4 (AXSA:2013-204:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-204:01 advisory. abrt: abrt is a tool to help users to detect defects in applications and to create a bug report with all informations needed by maintainer to fix it...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.39-1.13.11.0.AXS4 (AXSA:2016-231:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-231:02 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-0686 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and...

MiracleLinux 3 : subversion-1.6.11-11.AXS3 (AXSA:2013-398:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-398:01 advisory. Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files a...

MiracleLinux 4 : firefox-38.7.0-1.0.1.AXS4 (AXSA:2016-133:03)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-133:03 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

MiracleLinux 4 : nspr-4.11.0-0.1.AXS4, nss-3.21.0-0.3.AXS4, nss-util-3.21.0-0.3.AXS4 (AXSA:2016-205:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-205:01 advisory. nspr NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal fi...

MiracleLinux 7 : tomcat-7.0.69-12.el7 (AXSA:2017-1748:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1748:02 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Ja...

MiracleLinux 7 : firefox-45.4.0-1.0.1.el7.AXS7 (AXSA:2016-681:07)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-681:07 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

GHSA-JQ75-2M55-F6CV vulnerabilities

Vulnerabilities for packages: drupal...

EUVD-2026-2804

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components...

Security Bulletin: Bouncy Castle for Java BC-FJA NativeLoader Resource Consumption Issue, affects watsonx.data

Summary Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Boun...

[SECURITY] [DSA 6100-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6100-1 [email protected] https://www.debian.org/security/ Andres Salomon January 14, 2026 https://www.debian.org/security/faq -...

RustCrypto security vulnerabilities

RustCrypto is an open-source authentication encryption algorithm with associated data algorithms developed by RustCrypto. Versions of RustCrypto prior to 0.4.4 contained security vulnerabilities, which were caused by the compiler generating non-constant-time assembly code...

Web2Print Tools Bundle for Pimcore Security Vulnerabilities

Web2Print Tools Bundle for Pimcore is an open-source extension suite developed for Pimcore. Versions prior to 5.2.2 and 6.1.1 of Web2Print Tools Bundle for Pimcore contained security vulnerabilities. These vulnerabilities stemmed from the lack of server-side authorization checks for API endpoints...

Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale

The rise of AI agent frameworks has introduced agent skills, modular packages containing instructions and executable code that dynamically extend agent capabilities. While this architecture enables powerful customization, skills execute with implicit trust and minimal vetting, creating a...

Omnispace Agora Project security vulnerabilities

Omnispace Agora Project is a satellite IoT verification project developed by the American company Omnispace. Versions of Omnispace Agora Project prior to 25.10 contained security vulnerabilities. These vulnerabilities stemmed from the notify parameter of the file controller not properly cleaning...