21314 matches found
Google ChromeOS Access Control Error Vulnerability
Google ChromeOS is an operating system from the American company Google. Google ChromeOS suffers from an Access Control Error vulnerability that stems from improper access control of the Stylus Tools component, which can be exploited by an attacker to obtain information about a user's files...
CBL Mariner 2.0 Security Update: mdadm (CVE-2023-28938)
The version of mdadm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-28938 advisory. - Uncontrolled resource consumption in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a...
CBL Mariner 2.0 Security Update: net-tools (CVE-2025-46836)
The version of net-tools installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46836 advisory. - net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the...
Azure Linux 3.0 Security Update: net-tools (CVE-2025-46836)
The version of net-tools installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46836 advisory. - net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the...
CVE-2025-46836 affecting package net-tools for versions less than 2.10-4
CVE-2025-46836 affecting package net-tools for versions less than 2.10-4. A patched version of the package is available...
CVE-2025-46836 affecting package net-tools for versions less than 2.10-4
CVE-2025-46836 affecting package net-tools for versions less than 2.10-4. A patched version of the package is available...
CVE-2025-53674
Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization via the toolsUploaderHandler function. An attacker can execute arbitrary code and compromise the integrity, confidentiality, and availability of the system by uploading malicious binaries through an authenticated...
Important: Red Hat Security Advisory: Kiali 2.4.7 for Red Hat OpenShift Service Mesh 3.0
Kiali 2.4.7 for Red Hat OpenShift Service Mesh 3.0 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section Kiali 2.4.7, for Red H...
Jenkins plugin Sensedia Api Platform tools 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
PT-2025-28925 · Jenkins · Jenkins Sensedia Api Platform Tools Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0 Description: The Jenkins Sensedia Api Platform Tools Plugin stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller. This...
PT-2025-28963 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: Kaseya Rapid Fire Tools Network Detective versions through 2.0.16.0 Description: A cryptographic implementation flaw exists in the password encryption mechanism within the EncryptionUtil class. Symmetric encryption is implemented in a...
PT-2025-28962 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: Kaseya Rapid Fire Tools Network Detective version 2.0.16.0 Description: Kaseya Rapid Fire Tools Network Detective stores unencrypted credentials for privileged access in the collector.txt configuration file. Recommendations: Ensure the...
avif-tools-1.3.0-2.1 on GA media (moderate)
avif-tools-1.3.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15320-1 Rating: moderate Cross-References: CVE-2025-48174 CVSS scores: CVE-2025-48174 SUSE : 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L CVE-2025-48174 SUSE : 7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N...
Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-10551)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10551 advisory. - fixes 'CVE-2025-6032 container-tools:rhel8/podman: podman missing TLS verification rhel-8.10.z' Tenable has extracted the preceding description block directl...
OPENSUSE-SU-2025:15332-1 avif-tools-1.3.0-3.1 on GA media
These are all security issues fixed in the avif-tools-1.3.0-3.1 package on the GA media of openSUSE Tumbleweed...
GHSA-GJV4-GHM7-Q58Q MCP Server Kubernetes vulnerable to command injection in several tools
Summary A command injection vulnerability exists in the mcp-server-kubernetes MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to...
Malicious code in graphprotocol-tools-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2da3e0dc947efefeb72ffd27d949465798a6e39af182b4634c40e9dc4bed764 Any computer that has this package installed or running should be considered...
MAL-2025-5814 Malicious code in graphprotocol-tools-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2da3e0dc947efefeb72ffd27d949465798a6e39af182b4634c40e9dc4bed764 Any computer that has this package installed or running should be considered...