Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : GPSd vulnerabilities (USN-7948-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7948-1 advisory. It was discovered that GPSd incorrectly handled processing NMEA2000 packets. An attacker could use this issue to cause GPSd t...

CVE-2025-69542

A Command Injection vulnerability exists in the DHCP daemon service of the D-Link DIR895LA1 router (version v102b07 ). The flaw stems from the lease renewal processing logic, where the DHCP hostname parameter is directly concatenated into a system command without sufficient sanitization. By provi...

USN-7948-1: GPSd vulnerabilities

It was discovered that GPSd incorrectly handled processing NMEA2000 packets. An attacker could use this issue to cause GPSd to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2025-67268 It was discovered that GPSd incorrectly handled processing NAVCOM packets. An...

USN-7948-1 gpsd vulnerabilities

It was discovered that GPSd incorrectly handled processing NMEA2000 packets. An attacker could use this issue to cause GPSd to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2025-67268 It was discovered that GPSd incorrectly handled processing NAVCOM packets. An...

CVE-1999-0061

File creation and deletion, and remote execution, in the BSD line printer daemon lpd...

CVE-1999-0124

Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon...

CVE-1999-0043

Command execution via shell metachars in INN daemon innd 1.5 using "newgroup" and "rmgroup" control messages, and others...

CVE-1999-0689

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack...

CVE-1999-0692

The default configuration of the Array Services daemon arrayd disables authentication, allowing remote users to gain root privileges...

CVE-1999-0054

Sun's ftpd daemon can be subjected to a denial of service...

CVE-1999-0181

The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands...

CVE-1999-0303

Buffer overflow in BNU UUCP daemon uucpd through long hostnames...

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

CVE-2019-16747

In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free leading to memory corruption and a daemon crash via a crafted incoming network message, a different vulnerability than CVE-2019-14431...

CVE-2019-12549

WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daemon matches the embedded private key...

H3C M102G 安全漏洞

H3C M102G is an intelligent gateway from China's Xinhua San H3C. A security vulnerability exists in the H3C M102G that stems from an improper configuration of vsftpd, which could allow a remote attacker to gain root-level control of the device...

OPENSUSE-SU-2026:10008-1 gpsd-3.27.3-1.1 on GA media

These are all security issues fixed in the gpsd-3.27.3-1.1 package on the GA media of openSUSE Tumbleweed...

httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

A server side include handling flaw has been discovered in the Apache HTTP server. When Server Side Includes SSI areenabled and modcgid but not modcgi passes the shell-escaped query string to exec cmd="..." directives an attacker may be able to inject commands executed by the server...

The vulnerability of the httpd module implementation in microprogramming software enhances the capabilities of TP-Link TL-WA850RE V2 and V3 wireless signal amplifiers. This allows attackers to download configuration files.

The vulnerability of the httpd module implementation in microprogramming software for TP-Link’s wireless signal amplifiers TL-WA850RE V2 and V3 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to download the configuration file remote...

SUSE-SU-2026:20014-1 Security update for sssd

This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems bsc1244325...