https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T23:26:23.053835+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-11454 CVE-2019-11454 2026-10-06T23:26:23.097688+00:00

Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during an _viewlog operation.

 https://vulnerability.circl.lu/vuln/usn-4860-1 USN-4860-1 — monit vulnerabilities 2026-10-06T23:26:23.097777+00:00

Affected: Ubuntu:Pro:14.04:LTS: monit, Ubuntu:Pro:16.04:LTS: monit, Ubuntu:Pro:18.04:LTS: monit

Zack Flack discovered that Monit incorrectly handled certain input. A remote authenticated user could exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2019-11454)

Zack Flack discovered a buffer overread when Monit decoded certain crafted URLs. An attacker could exploit this to potentially leak sensitive information. (CVE-2019-11455)