68509 matches found
ALSA-2025:20478 Moderate: zziplib security update
The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: directory traversal in unzzipcat in the bins/unzzipcat-mem.c CVE-2018-17828 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
RHEL 9 : zziplib (RHSA-2025:20838)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20838 advisory. The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: directory traversal in unzzipcat in the...
RHEL 10 : zziplib (RHSA-2025:20478)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20478 advisory. The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: directory traversal in unzzipcat in the...
Lexmark Printers Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2018-15519)
Various Lexmark devices have a Buffer Overflow vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503860; scriptversion"1.3";...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989162)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989162 advisory. In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMAFROMDEVICE The problem I'm addressing was discovered by the LTP te...
Lexmark Printers Path Traversal (CVE-2018-18894)
Certain older Lexmark devices C, M, X, and 6500e before 2018-12-18 contain a directory traversal vulnerability in the embedded web server. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
CVE-2018-1002208
creationtimestamp| type| source ---|---|--- 2025-11-03 14:23:54+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av25-719 2026-04-30 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-120-02 2026-05-05 10:00:00+00:00| seen|...
CVE-2018-6242
creationtimestamp| type| source ---|---|--- 2025-11-02 03:00:06+00:00| published-proof-of-concept| Telegram/OZ23IKbQ47oGvBTE7eizQgpIhDfJ5XALPOlUhm63kbbFXAA 2025-12-21 15:00:08+00:00| published-proof-of-concept| Telegram/GKw6KWu74hDM5ChLJJmVxv5UVQ8gqkAeQo71ShuHxpLjmP0 2026-08-22 18:16:45+00:00|...
CVE-2018-11654
creationtimestamp| type| source ---|---|--- 2025-10-31 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jerle7tp2b...
CVE-2018-25122
creationtimestamp| type| source ---|---|--- 2025-10-31 13:55:03+00:00| seen| Telegram/Q2bKXQpOf5LmvyABsZOfWl30xxORdOX7kbdWGl1lH9WOVY...
CVE-2018-25121
creationtimestamp| type| source ---|---|--- 2025-10-31 12:53:48+00:00| seen| Telegram/hSAnqWGiLMz57SuHr7FzATBMgjZzP-bb7SBTtkrvV2n-gc...
CVE-2018-25122 Nagios XI < 5.4.13 Component Download Page RCE
Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page. The download/import handler used unsafe command construction with attacker-controlled input and lacked sufficient validation and output encoding, allowing an authenticated user to inje...
CVE-2018-25120
creationtimestamp| type| source ---|---|--- 2025-10-29 22:14:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ehu2h5fp26 2026-06-23 14:03:57+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/68b07cd5-3756-429d-ac43-34f742448814 2026-06-30...
CVE-2018-20699 affecting package podman for versions less than 5.6.1-2
CVE-2018-20699 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...
Exploit for CVE-2018-9995
CVE-2018-...
Exploit for Race Condition in Openbsd Openssh
CVE-2018-15473-Exploit Updated version with modern Python/P...
CVE-2018-25118 GeoVision Command Injection RCE via /PictureCatch.cgi
GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. The vulnerable models have been declared end-of-life EOL by the vendor. VulnCheck has...
VulnCheck KEV: CVE-2018-25118
GeoVision embedded IP devices, confirmed on GV-BX1500 and GV-MFD1501, contain a remote command injection vulnerability via /PictureCatch.cgi that enables an attacker to execute arbitrary commands on the device. The vulnerable models have been declared end-of-life EOL by the vendor. VulnCheck has...