Lucene search
+L

131 matches found

OSV
OSV
added 2026/03/18 6:16 p.m.22 views

UBUNTU-CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2026/03/18 6:16 p.m.6 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2026/03/18 5:55 p.m.9 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References3
OSV
OSV
added 2026/03/18 5:55 p.m.9 views

CVE-2026-32634 Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/03/18 5:55 p.m.36 views

CVE-2026-32634

Glances Central Browser mode vulnerability (CVE-2026-32634): prior to 4.5.2, Zeroconf advertising can mislead the browser into using an untrusted server name to create connection URIs, and to look up saved passwords. If a dynamic server reports itself as protected, the untrusted name is also used...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/18 5:55 p.m.3 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-32634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised...

8.1CVSS5.1AI score0.00282EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/03/16 4:36 p.m.15 views

Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Summary In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself as protected, Glances...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/03/16 4:36 p.m.7 views

GHSA-VX5F-957P-QPVM Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

Summary In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself as protected, Glances...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-25821

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.2 Description Glances, a system cross-platform monitoring tool, contains a flaw in Central Browser mode. The software stores both the Zeroconf-advertised server name and the discovered IP address for dynamic...

8.1CVSS5.8AI score0.00282EPSS
SaveExploits1References28
Debian
Debian
added 2023/06/21 10:49 p.m.45 views

[SECURITY] [DLA 3466-1] avahi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3466-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès June 21, 2023 https://wiki.debian.org/LTS -...

5.5CVSS5.9AI score0.00453EPSS
SaveExploits0
AlmaLinux
AlmaLinux
added 2021/09/21 7:13 a.m.16 views

pcp bug fix and enhancement update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Bug Fixes and...

2.7AI score
SaveExploits0
Fedora
Fedora
added 2021/08/19 1:11 a.m.48 views

[SECURITY] Fedora 33 Update: avahi-0.8-14.fc33

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...

1.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/08/19 12:0 a.m.30 views

Fedora: Security Advisory for avahi (FEDORA-2021-b252318a99)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2020/07/07 12:30 p.m.84 views

Airshare - Cross-platform Content Sharing In A Local Network

Airshare is a Python-based CLI tool and module that lets you transfer data between two machines in a local network, P2P, using Multicast-DNS. It also opens an HTTP gateway for other non-CLI external interfaces. It works completely offline! Built with aiohttp and zeroconf. Checkout the demo...

7.3AI score
SaveExploits0References3
Fedora
Fedora
added 2016/07/23 9:6 p.m.43 views

[SECURITY] Fedora 23 Update: kf5-kdnssd-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 integration module for DNS-SD services Zeroconf...

7.5CVSS3AI score0.04429EPSS
SaveExploits1
Fedora
Fedora
added 2016/07/23 7:7 p.m.25 views

[SECURITY] Fedora 24 Update: kf5-kdnssd-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 integration module for DNS-SD services Zeroconf...

7.5CVSS3AI score0.04429EPSS
SaveExploits1
Fedora
Fedora
added 2014/09/27 9:47 a.m.33 views

[SECURITY] Fedora 20 Update: kdnssd-4.14.1-1.fc20

KDE Network Monitor for DNS-SD services Zeroconf...

6.9CVSS2.1AI score0.00359EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2013/05/31 12:0 a.m.697 views

mDNS Detection (Local Network)

The remote service understands the Bonjour also known as ZeroConf or mDNS protocol, which allows anyone to uncover information from the remote host such as its operating system type and exact version, its hostname, and the list of services it is running. This plugin attempts to discover mDNS used...

5.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.28 views

CentOS Update for avahi CESA-2009:0013 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS8.4AI score0.59223EPSS
SaveExploits7References2
Rows per page
Query Builder