32 matches found
Fedora: Security Advisory (FEDORA-2025-0e41e63705)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-f810869906)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2025-13674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service CVE-2025-13674 Note that Nessus relies on the presence of the package as reported by the vendor...
libwireshark19-4.6.1-2.1 on GA media (moderate)
libwireshark19-4.6.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:15778-1 Rating: moderate Cross-References: CVE-2025-13674 CVSS scores: CVE-2025-13674 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-13674 SUSE : 6.7...
SUSE CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674
creationtimestamp| type| source ---|---|--- 2025-11-26 14:24:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6k2mxyfde2q...
AZL-71044 CVE-2025-13674 affecting package wireshark 4.0.8-1
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
UBUNTU-CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674 Access of Uninitialized Pointer in Wireshark
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674 Access of Uninitialized Pointer in Wireshark
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674
BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...
CVE-2025-13674
CVE-2025-13674 affects Wireshark 4.6.0: BPv7 protocol dissector crash can cause denial of service. Multiple Nessus entries corroborate a BPv7 dissector crash in 4.6.0 and note that upgrade to 4.6.3 or later mitigates the issue. The vulnerability is a crash caused by a BPv7 parser crash in Wiresha...
AlmaLinux 10 : toolbox (ALSA-2025:13674)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding description...
EUVD-2021-13674
Malware in sbrugna...
CVE-2024-13674
The Cosmic Blocks 40+ Content Editor Blocks Collection plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cwpsocialshare' shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2024-13674
The Cosmic Blocks 40+ Content Editor Blocks Collection plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cwpsocialshare' shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2024-13674 Cosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Cosmic Blocks 40+ Content Editor Blocks Collection plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cwpsocialshare' shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2019-13674
creationtimestamp| type| source ---|---|--- 2024-02-27 09:46:07+00:00| seen| https://t.me/ctinow/194148...
CVE-2020-13674
CVE-2020-13674 affects the Drupal QuickEdit module (Standard profile). The issue is a cross-site request forgery due to improper validation of access to routes, leading to possible data integrity issues when QuickEdit is installed. Removing the "access in-place editing" permission from untrusted ...