41 matches found
MINI-736P-GG2W-7438
Bulletin has no description...
MiracleLinux 9 : openssl-3.0.7-25.el9_3 (AXSA:2024-7438:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7438:02 advisory. openssl: Incorrect cipher key and IV length processing CVE-2023-5363 Tenable has extracted the preceding description block directly from the MiracleLinux...
Linux Distros Unpatched Vulnerability : CVE-2016-7438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The C software implementation of ECC in wolfSSL formerly CyaSSL before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit...
MAL-2025-7438 Malicious code in @crabas0npm/odit-ullam-incidunt (npm)
The package @crabas0npm/odit-ullam-incidunt was found to contain malicious code...
CVE-2025-7438
creationtimestamp| type| source ---|---|--- 2025-07-18 07:31:21+00:00| seen| Telegram/Y-8vyS7yyIRygDcwY2laGoevG6qriol3eolKBNbr8kuB5VI...
WordPress MasterStudy LMS Pro plugin <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Thái An in WordPress Plugin MasterStudy LMS Pro versions = 4.7.9...
CVE-2024-7438
A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument...
Ubuntu: Security Advisory (USN-7438-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2018-7438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function. CVE-2018-7438 Note that Nessus relies...
CVE-2024-7438
creationtimestamp| type| source ---|---|--- 2024-08-03 19:16:33+00:00| seen| https://t.me/cvedetector/2396...
CGA-72PQ-9GRP-7438
Bulletin has no description...
CGA-6Q9P-7438-P25M
Bulletin has no description...
RHEL 8 : freexl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freexl: heap-based buffer over-read in the function readminibiffnextrecord CVE-2018-7439 - An issue was...
RHEL 9 : Red Hat OpenStack Platform 17.1.1 (python-gevent) (RHSA-2023:7438)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7438 advisory. gevent is a coroutine-based Python networking library that uses greenlet to provide a high-level synchronous API on top of libevent event loop...
Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (python-gevent) security update
An update for python-gevent is now available for Red Hat OpenStack Platform 17.1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
SUSE CVE-2018-7438
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...
GLSA-202007-44 : FreeXL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-44 FreeXL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FreeXL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...
CVE-2018-7438
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...
JioFi 4G M2S 1.0.2 Cross Site Scripting
Exploit Title: cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter. Exploit Author: Vikas Chaudhary Date: 21-01-2019 Vendor Homepage: https://www.jio.com/ Hardware Link:...
JioFi 4G M2S 1.0.2 - 'mask' Cross-Site Scripting
Exploit Title: cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter. Exploit Author: Vikas Chaudhary Date: 21-01-2019 Vendor Homepage: https://www.jio.com/ Hardware Link:...