Lucene search
K

7 matches found

RedHat Linux
RedHat Linux
added 2026/04/13 10:5 a.m.3 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: qt6: qt6-filesystem-6.11.0-1.hum1 aarch64, x8664 qt6-rpm-macros-6.11.0-1.hum1 noarch qt6-srpm-macros-6.11.0-1.hum1 noarch qt6-6.11.0-1.hum1.src src...

9.3CVSS5.8AI score0.00011EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/10 2:57 a.m.22 views

CVE-2026-22597 Ghost has SSRF via External Media Inliner

Ghost is a Node.js content management system. In versions 5.38.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost’s media inliner mechanism allows staff users in possession of a valid authentication token for the Ghost Admin API to exfiltrate data from internal systems via SSRF...

5.1CVSS0.00033EPSS
Exploits0References3
CVE
CVE
added 2026/01/10 2:57 a.m.11 views

CVE-2026-22596

CVE-2026-22596 affects Ghost, a Node.js CMS. A SQL injection flaw exists in Ghost’s /ghost/api/admin/members/events endpoint due to insufficient input validation, exploitable by users with Admin API credentials. Affected versions: 5.90.0–5.130.5 and 6.0.0–6.10.3. The issue allows arbitrary SQL ex...

7.2CVSS7.2AI score0.00051EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/01/08 9:36 p.m.3 views

GHSA-GJRP-XGMH-X9QQ Ghost has SQL Injection in Members Activity Feed

Impact A vulnerability in Ghost's /ghost/api/admin/members/events endpoint allows users with authentication credentials for the Admin API to execute arbitrary SQL. Vulnerable versions This vulnerability is present in Ghost v5.90.0 to v5.130.5 to and Ghost v6.0.0 to v6.10.3. Patches v5.130.6 and...

6.7CVSS7.5AI score0.00051EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-5506

Malware in sbrugna...

5.3CVSS5.9AI score0.00406EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2024/11/18 12:0 a.m.15 views

Fedora: Security Advisory (FEDORA-2024-727ecb90c7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.4AI score0.00502EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/04/04 12:0 a.m.4 views

Undici 安全漏洞

undici is an HTTP/1.1 client. A security vulnerability exists in Undici that stems from allowing an attacker to change the integrity option passed to fetch and allowing fetch to receive tampered requests. Affected products and versions: Undici versions prior to 5.28.3, 6.0.0 through 6.11.0...

3.5CVSS6.3AI score0.00066EPSS
Exploits1References6
Rows per page
Query Builder