openSUSE 16 Security Update : golang-github-prometheus-prometheus (openSUSE-SU-2026:20177-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20177-1 advisory. Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of...

CVE-2026-1237

Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to update database records can mint an invalid macaroon that is incorrectly validated by the juju controller, enabling a charm to maintain otherwise revoked or...

CVE-2026-1237: Operation on a Resource after Expiration or Release

Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to update database records can mint an invalid macaroon that is incorrectly validated by the juju controller, enabling a charm to maintain otherwise revoked or...

When Does a Chatbot Make Sense in Freshdesk and When It Doesn’t

Customer support teams adopt chatbots to reduce workload, shorten response times, and control costs. Freshdesk makes chatbot deployment…...

CVE-2023-45085

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts the availability of these workloads tha...

CVE-2022-23119

A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the target Deep Security...

CVE-2022-38389

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975...

CVE-2024-42197

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

CVE-2024-42197

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

CVE-2024-42197

The CVE-2024-42197 entry concerns HCL Workload Scheduler storing user credentials in plain text, allowing a local non-privileged user to read them. The available documents consistently describe the issue as cleartext credential storage without details on affected versions or root cause beyond the...

CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

EUVD-2024-55325

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

CVE-2025-36916

A security vulnerability exists in the TPU component of Google Pixel devices due to a double fetch caused by a race condition in PrepareWorkloadBuffers of gxp_main_actor.cc. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interacti...

PT-2025-50693

Name of the Vulnerable Software and Affected Versions HCL Workload Scheduler affected versions not specified Description HCL Workload Scheduler stores user credentials in plain text, allowing a local user to read them. Recommendations At the moment, there is no information about a newer version...

PT-2025-50699

In PrepareWorkloadBuffers of gxp main actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

HCL Workload Scheduler 安全漏洞

HCL Workload Scheduler is a workload scheduler from HCL India. A security vulnerability exists in HCL Workload Scheduler that stems from storing user credentials in clear text, which could be read by a local user...

CVE-2024-42197: Plaintext Storage of a Password

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

Introducing Wiz SAST: Where Code Risk Meets Cloud Context

Modern code runs in complex and distributed cloud environments. Wiz SAST meets this complexity by correlating code flaws with real cloud context–including where workloads run, what they can access, and how exposed they are...

PUB-A-421250936

In PrepareWorkloadBuffers of gxpmainactor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...