Linux Distros Unpatched Vulnerability : CVE-2019-14858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog...

PT-2025-32401 · Zenoss · Zenoss Core

Name of the Vulnerable Software and Affected Versions: Zenoss Core versions 3.x Description: Zenoss Core contains a command injection issue in the showDaemonXMLConfig API endpoint. The daemon parameter is directly passed to a Popen call in ZenossInfo.py without proper sanitization, potentially...

AZL-66192 CVE-2025-47808 affecting package gstreamer1-plugins-base 1.20.0-3

In GStreamer through 1.26.1, the subparse plugin's tmplayerparseline function may dereference a NULL pointer while parsing a subtitle file, leading to a crash...

AZL-66189 CVE-2025-47807 affecting package gstreamer1-plugins-base 1.20.0-3

In GStreamer through 1.26.1, the subparse plugin's subripunescapeformatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash...

CBL Mariner 2.0 Security Update: mysql (CVE-2025-5025)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-5025 advisory. - libcurl supports pinning of the server certificate public key for HTTPS transfers. Due to an omission, this...

Linux Distros Unpatched Vulnerability : CVE-2021-3326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an...

Alibaba Cloud Linux 3 : 0132: osbuild-composer (ALINUX3-SA-2025:0132)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0132 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-22871: The net/http package improperly...

Alibaba Cloud Linux 3 : 0124: unbound (ALINUX3-SA-2025:0124)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0124 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-5994: A multi-vendor cache poisoning...

Alibaba Cloud Linux 3 : 0128: go-toolset:an8 (ALINUX3-SA-2025:0128)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0128 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-45336: The HTTP client drops...

Alibaba Cloud Linux 3 : 0129: libxml2 (ALINUX3-SA-2025:0129)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0129 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-7425: A flaw was found in libxslt where th...

Alibaba Cloud Linux 3 : 0126: perl (ALINUX3-SA-2025:0126)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0126 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-40909: Perl threads have a working directo...

Alibaba Cloud Linux 3 : 0130: grafana-pcp (ALINUX3-SA-2025:0130)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0130 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-22871: The net/http package improperly...

OSV-2025-600 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=436037111 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack Imf34::ScanLineInputFile::Data::readPixels Imf34::InputFile::readPixels...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2025-6348

The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

MAL-2025-6677 Malicious code in undeface-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d434f28a3308a27549e2074866ae549681568f517ab1c783d210924f5d827f0 The OpenSSF Package Analysis project identified 'undeface-test-3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2025-6398

CVE-2025-6398 affects ASUS AI Suite 3 via the IOMap64.sys driver, where a null pointer dereference can be triggered by specially crafted input, potentially causing a system crash (BSOD). The issue is local with high privileges required and user interaction not required; impact is primarily availa...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...