47 matches found
CVE-2026-7459
creationtimestamp| type| source ---|---|--- 2026-05-30 10:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mn2ttkka6g2e 2026-05-30 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116663059987255369 2026-05-30 16:02:08+00:00| seen|...
CVE-2020-7459
In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...
RockyLinux 10 : buildah (RLSA-2025:7459)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7459 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 Tenable has extracted the preceding description block directly from the RockyLinux...
Linux Distros Unpatched Vulnerability : CVE-2017-7459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntopng before 3.0 allows HTTP Response Splitting. CVE-2017-7459 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...
MAL-2025-7459 Malicious code in @crabas0npm/possimus-nisi-officia (npm)
The package @crabas0npm/possimus-nisi-officia was found to contain malicious code...
Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS Product
Summary Vulnerabilities exist in IBM Netezza Analytics - NPS product are addressed in version 11.2.29 Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: pypa/setuptools could allow a remote attacker to execute arbitrary code on the system, caused by an error in the packageindex module. By...
CVE-2025-7459
Concrete details confirm: code-projects Mobile Shop 1.0 is affected in EditMobile.php, where the ID parameter is not validated, enabling remote SQL injection. Public exploitation has been disclosed. Impact is described as high/critical with potential data exposure and modification, and remote com...
CVE-2025-7459 code-projects Mobile Shop EditMobile.php sql injection
A vulnerability classified as critical was found in code-projects Mobile Shop 1.0. This vulnerability affects unknown code of the file /EditMobile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public an...
CVE-2024-7459
creationtimestamp| type| source ---|---|--- 2024-08-05 02:12:03+00:00| seen| https://t.me/cvedetector/2416...
Amazon Linux 2 : python-crypto (ALASANSIBLE2-2024-011)
It is, therefore, affected by a vulnerability as referenced in the ALAS2ANSIBLE2-2024-011 advisory. Heap-based buffer overflow in the ALGnew function in blocktemplace.c in Python Cryptography Toolkit aka pycrypto allows remote attackers to execute arbitrary code as demonstrated by a crafted iv...
Important: python-crypto
Issue Overview: Heap-based buffer overflow in the ALGnew function in blocktemplace.c in Python Cryptography Toolkit aka pycrypto allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py. CVE-2013-7459 Affected Packages: python-crypto Note: This...
Security Bulletin: Vulnerability in pycrypto-2.6.1.tar.gz affects IBM Integrated Analytics System [CVE-2013-7459, CVE-2018-6594]
Summary The pycrypto-2.6.1.tar.gz package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable vulnerability CVE-2013-7459, CVE-2018-6594. Vulnerability Details CVEID:CVE-2013-7459 DESCRIPTION: PyCrypto is vulnerable to a heap-based buffer...
SUSE: Security Advisory (SUSE-SU-2017:1744-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.6.0 : python-crypto (EulerOS-SA-2020-1996)
According to the versions of the python-crypto package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the ALGnew function in blocktemplace.c in Python Cryptography Toolkit aka pycrypto...
CVE-2020-7459
In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...
CVE-2020-7459
CVE-2020-7459 affects FreeBSD 12.x and 11.x UDB network drivers (smsc(4), muge(4), cdceem(4)). The issue is a missing length validation in multiple USB network drivers that allows a malicious USB device to write beyond the end of an allocated network packet buffer, potentially enabling kernel or ...
FreeBSD-SA-20:21.usb_net
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:21.usbnet Security Advisory The FreeBSD Project Topic: Potential memory corruption in USB network device drivers Category: core Module: kernel Announced:...
Huawei EulerOS: Security Advisory for python-crypto (EulerOS-SA-2018-1168)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Photon OS 1.0: Openjre PHSA-2017-0026
An update of the openjre package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0026. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121719;...
Photon OS 1.0: Pycrypto PHSA-2017-0026
An update of the pycrypto package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0026. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121720;...