Ubuntu: Security Advisory (USN-7693-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : CarrierWave vulnerabilities (USN-7497-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7497-1 advisory. Rikita Ishikawa discovered that CarrierWave did not correctly sanitize certain inputs. An attacker could possibly use...

Zhongcheng Kexin Ticketing Management Platform 安全漏洞

Zhongcheng Kexin Ticketing Management Platform Zhongcheng Kexin Ticketing Management Platform is a ticketing management platform from the Chinese company Zhongcheng Kexin Zhongcheng Kexin. A security vulnerability exists in Zhongcheng Kexin Ticketing Management Platform version 20.04, which stems...

PT-2024-25479 · Unknown · Zhongcheng Kexin Ticketing Management Platform

Name of the Vulnerable Software and Affected Versions: Zhongcheng Kexin Ticketing Management Platform version 20.04 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file, exploiting an arbitrary file upload vulnerability. Recommendations: For Zhongcheng...

CVE-2021-3033 Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console

An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized use...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : urllib3 vulnerability (USN-4570-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4570-1 advisory. It was discovered that urllib3 incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform...

PT-2020-13373 · Teradici · Teradici Management Console

Name of the Vulnerable Software and Affected Versions: Teradici Management console versions 20.04 and 20.01.1 Description: The web server in the Teradici Management console did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a maliciou...