https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T23:17:07.215699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-15644 cnvd-2018-15644 2026-10-22T23:17:07.219037+00:00 cnvd-2018-15644 https://cve.radiocsirt.org/vuln/euvd-2026-65034 EUVD-2026-65034 2026-10-22T23:17:07.219109+00:00 EUVD-2026-65034 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11142 fkie_cve-2018-11142 2026-10-22T23:17:07.219123+00:00

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.

 https://cve.radiocsirt.org/vuln/ghsa-2qcm-cv9r-3v6h GHSA-2qcm-cv9r-3v6h 2026-10-22T23:17:07.219155+00:00

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.

 https://cve.radiocsirt.org/vuln/gsd-2018-11142 gsd-2018-11142 2026-10-22T23:17:07.219173+00:00 gsd-2018-11142