21658 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-0157
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross- site Scripting' CVE-2022-0157 Note that Nessus relies o...
Linux Distros Unpatched Vulnerability : CVE-2022-0196
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF CVE-2022-0196 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2022-0197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF CVE-2022-0197 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2022-0238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF CVE-2022-0238 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2022-0571
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site Scripting XSS - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2. CVE-2022-0571 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2022-40704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A XSS vulnerability was found in phoromaticraddtestdetails.php in phoronix-test-suite. CVE-2022-40704 Note that Nessus relies on the presence of the package as...
CVE-2024-46916
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file. This can allow code execution and, ...
CVE-2024-46916
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file. This can allow code execution and, ...
The vulnerability of platformes for event monitoring, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security arises from improper code generation management. This allows attackers to execute arbitrary code.
The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to improper code generation management. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary code...
Diebold Nixdorf Vynamic Security Suite 安全漏洞
Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS version 4.3.0 SR06 and prior versions, which stems from improper deletion of critical syst...
Diebold Nixdorf Vynamic Security Suite 安全漏洞
Diebold Nixdorf Vynamic Security Suite Diebold Nixdorf VSS is a security access suite from Diebold Nixdorf, USA. A security vulnerability exists in Diebold Nixdorf Vynamic Security Suite version 4.3.0 SR01 and prior versions, which stems from insufficient validation of file attributes and could...
TencentOS Server 4: phoronix-test-suite (TSSA-2025:0641)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0641 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
The vulnerability in the web interface of the Cisco TelePresence Management Suite software allows a attacker to perform cross-site scripting (XSS) attacks.
The vulnerability in the web interface of the Cisco TelePresence Management Suite software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
Remote Code Execution Vulnerability in Hitachi Energy Service Suite Product
SUMMARY Hitachi Energy is aware of a remote code execution vulnerability that affects the Oracle WebLogic component in the Service Suite product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability...
Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product
SUMMARY Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product. Please refer to the...
UBUNTU-CVE-2025-9403
A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function runjqtests of the file jqtest.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Othe...
Malicious code in theme-rushstack-suite-nav (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 074f653dbf45333a4bcc8de28235ca35817a8f8c9e06e26b07010a325b039aa7 The OpenSSF Package Analysis project identified...
Intel Connectivity Performance Suite Competitive Conditions Vulnerability
Intel Connectivity Performance Suite is a network optimization software solution from Intel, with key features that include automatically optimizing a computer's network connectivity performance and prioritizing critical applications based on user needs. A competitive condition vulnerability exis...
CVE-2025-51506
In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter. This flaw enables any authenticated user to execute arbitrary SQL queries, via crafted payloads to valueKey to the api/smartlibrary/v2/en/dictionaries/options/looku...
CVE-2025-51506
In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter. This flaw enables any authenticated user to execute arbitrary SQL queries, via crafted payloads to valueKey to the api/smartlibrary/v2/en/dictionaries/options/looku...