CBL Mariner 2.0 Security Update: binutils / gdb (CVE-2025-1176)

The version of binutils / gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1176 advisory. - A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the...

CBL Mariner 2.0 Security Update: mdadm (CVE-2023-28736)

The version of mdadm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-28736 advisory. - Buffer overflow in some IntelR SSD Tools software before version mdadm-4.2-rc2 May allow a privileged user to...

CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2024-0408)

The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0408 advisory. - A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating...

CBL Mariner 2.0 Security Update: giflib (CVE-2023-39742)

The version of giflib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39742 advisory. - giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. CVE-2023-39742 Note...

CVE-2025-1359

A vulnerability, which was classified as problematic, has been found in SIAM Industria de Automação e Monitoramento SIAM 2.0. This issue affects some unknown processing of the file /qrcode.jsp. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotel...

CVE-2025-1359

CVE-2025-1359 affects SIAM SIAM 2.0: the /qrcode.jsp file is vulnerable to cross-site scripting through a manipulated url parameter. This is a remote attack with user interaction required; exploitation has been disclosed publicly and the vendor did not respond. Technical details across sources co...

CBL Mariner 2.0 Security Update: binutils (CVE-2025-0840)

The version of binutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0840 advisory. - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects th...

CBL Mariner 2.0 Security Update: avahi (CVE-2024-52616)

The version of avahi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52616 advisory. - A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup,...

CBL Mariner 2.0 Security Update: busybox (CVE-2022-48174)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48174 advisory. - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Interne...

CVE-2024-11629

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 2025.1.205, using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF...

CVE-2025-23428 WordPress QMean plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound QMean – WordPress Did You Mean allows Reflected XSS. This issue affects QMean – WordPress Did You Mean: from n/a through 2.0...

CVE-2025-23428

CVE-2025-23428 affects the WordPress plugin QMean – WordPress Did You Mean (NotFound) up to version 2.0. It describes a Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation, enabling reflected XSS. Public reporting confirms the vulnerability ...

CVE-2022-32507

An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts, could also be called from unprivileged accounts. This demonstrates that no access controls were implemented for the different BLE commands...

CVE-2022-32505

An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and reboot the device. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4...

CVE-2025-1185

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModalSensorGraph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CBL Mariner 2.0 Security Update: python3 (CVE-2023-27043)

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-27043 advisory. - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special...

CBL Mariner 2.0 Security Update: golang / msft-golang (CVE-2024-45336)

The version of golang / msft-golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45336 advisory. - The HTTP client drops sensitive headers after following a cross-domain redirect. For example, ...

CBL Mariner 2.0 Security Update: golang / msft-golang (CVE-2024-45341)

The version of golang / msft-golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45341 advisory. - A certificate with a URI which has a IPv6 address with a zone ID May incorrectly satisfy a URI...

CBL Mariner 2.0 Security Update: python-twisted (CVE-2023-46137)

The version of python-twisted installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46137 advisory. - Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when...

CBL Mariner 2.0 Security Update: nodejs / nodejs18 (CVE-2025-23085)

The version of nodejs / nodejs18 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23085 advisory. - A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY...