25 matches found
CVE-2025-10151
creationtimestamp| type| source ---|---|--- 2025-10-28 09:01:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4al3buxsh2m 2025-10-28 11:14:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4asjsaoyr24...
Linux Distros Unpatched Vulnerability : CVE-2016-10151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allo...
CVE-2024-10151
The Auto iFrame WordPress plugin before 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-10151 Auto iFrame < 2.0 - Contributor+ XSS via Shortcode
The Auto iFrame WordPress plugin before 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-10151
The Auto iFrame WordPress plugin (versions prior to 2.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to properly validate and escape certain shortcode attributes before they are rendered on a page or post. This flaw allows users with contributor roles or higher to inject ...
RHEL 5 : hesiod (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened CVE-2016-10152 - Th...
EulerOS 2.0 SP3 : hesiod (EulerOS-SA-2022-1729)
According to the versions of the hesiod package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment...
Huawei EulerOS: Security Advisory for hesiod (EulerOS-SA-2022-1729)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for hesiod (EulerOS-SA-2022-1325)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : hesiod (EulerOS-SA-2022-1325)
According to the versions of the hesiod package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment...
Advisory ROSA-SA-2021-1852
Software: hesiod 3.2.1 OS: Cobalt 7.9 CVE-ID: CVE-2016-10151 CVE-Crit: HIGH CVE-DESC: The hesiodinit function in lib / hesiod.c in Hesiod 3.2.1 compares EUID to UID to determine whether to use configurations from environment variables, allowing local users to gain privileges via 1 HESIODCONFIG or...
CVE-2019-10151
CVE-2019-10151 is rejected/not used and does not represent an active vulnerability entry.
Fedora 29 : hesiod (2018-792ff3cafa)
Fix CVE-2016-10152 hard-coded DNS fallback Fix CVE-2016-10151 weak SUID check Move package to autosetup Resolves: 1332509 Resolves: 1332494 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
CVE-2018-10151
CVE-2018-10151 entry is rejected/not used as stated in the initial description.
Fedora 27 : hesiod (2018-25c6d1b417)
Fix CVE-2016-10152 hard-coded DNS fallback Fix CVE-2016-10151 weak SUID check Move package to autosetup Resolves: 1332509 Resolves: 1332494 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
GLSA-201805-01 : hesiod: Root privilege escalation
The remote host is affected by the vulnerability described in GLSA-201805-01 hesiod: Root privilege escalation Multiple vulnerabilities have been discovered in hesiod that have remained unaddressed. Please review the referenced CVE identifiers for details. Impact : A remote or local attacker may ...
CVE-2017-10151
creationtimestamp| type| source ---|---|--- 2017-11-01 11:44:07+00:00| published-proof-of-concept| https://t.me/alexmakus/1432 2017-11-01 11:46:03+00:00| seen| https://t.me/antichat/141 2026-07-26 07:01:57+00:00| seen| https://t.me/KaitNews/6054 2026-07-27 00:01:39+00:00| seen|...
Oracle Identity Manager Default Account Local Check (CVE-2017-10151)
The remote host is missing a security update for Oracle Identity Manager. It, therefore, has a default account enabled that allows an unauthenticated, remote attacker to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...