Lucene search
+L

123 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2016-9074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services NSS 3.26.1. Th...

5.9CVSS6.9AI score0.02421EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2019-9074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV...

5.5CVSS7AI score0.01556EPSS
SaveExploits1References3
Circl
Circl
added 2024/10/10 5:52 a.m.14 views

CVE-2024-9074

creationtimestamp| type| source ---|---|--- 2024-10-10 05:52:55+00:00| seen| https://t.me/cvedetector/7561...

6.4CVSS4.8AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/10 2:06 a.m.24 views

CVE-2024-9074 Advanced Blocks Pro <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Advanced Blocks Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

6.4CVSS0.0025EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/10/09 12:00 a.m.15 views

WordPress Advanced Blocks Pro Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Blocks Pro Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9074 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d18cad8c24cd Credits Francesco Carlucci...

6.4CVSS5.7AI score0.0025EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/07/22 12:00 a.m.20 views

Photon OS 2.0: Binutils PHSA-2019-2.0-0167

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0167. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

5.5CVSS6AI score0.02247EPSS
SaveExploits7References8
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.68 views

RHEL 7 : nss (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nss: Insufficient timing side-channel resistance in divSpoiler CVE-2016-9074 - nss before version 3.30 is...

7AI score0.02421EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/03 9:31 p.m.29 views

Security Bulletin: A vulnerability in GNU Binutils may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service (CVE-2019-9074).

Summary GNU Binutils is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. CVE-2019-9074. Vulnerability Details CVEID:CVE-2019-9074 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds read leading to a SEGV in bfdgetl32 in libbfd.c i...

5.5CVSS6.1AI score0.01556EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/12/27 12:00 a.m.33 views

NewStart CGSL MAIN 6.02 : binutils Multiple Vulnerabilities (NS-SA-2023-0104)

The remote NewStart CGSL host, running version MAIN 6.02, has binutils packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SE...

7.8CVSS7.1AI score0.01683EPSS
SaveExploits2References5
F5 Networks
F5 Networks
added 2023/02/21 7:00 p.m.34 views

K09092524: Binutils vulnerability CVE-2019-9074

Security Advisory Description An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfdgetl32 in libbfd.c, when called from pex64getruntimefunction in pei-x8664.c. CVE-2019-9074 Impact...

5.5CVSS7.4AI score0.01556EPSS
SaveExploits1Affected Software13
F5 Networks
F5 Networks
added 2023/02/21 6:47 p.m.70 views

K61223103: Linux kernel vulnerability CVE-2017-9074

Security Advisory Description The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified...

7.8CVSS6.7AI score0.00419EPSS
SaveExploits0Affected Software19
Tenable Nessus
Tenable Nessus
added 2023/01/14 12:00 a.m.29 views

Rocky Linux 8 : thunderbird (RLSA-2022:9074)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:9074 advisory. - A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox This bug only affects...

9.8CVSS8.3AI score0.00921EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2022/12/19 12:00 a.m.30 views

RHEL 8 : thunderbird (RHSA-2022:9074)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9074 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.6.0. Security Fixes: Mozilla:...

9.8CVSS8AI score0.00921EPSS
SaveExploits0References16
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.33 views

Mageia: Security Advisory (MGASA-2016-0379)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.12263EPSS
SaveExploits4References6
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.25 views

Mageia: Security Advisory (MGASA-2017-0188)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.05186EPSS
SaveExploits12References11
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.29 views

Mageia: Security Advisory (MGASA-2017-0187)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.05186EPSS
SaveExploits12References13
CVE
CVE
added 2021/11/23 7:58 p.m.21 views

CVE-2015-9074

CVE-2015-9074 is rejected per the initial description.

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2021/11/23 7:58 p.m.13 views

CVE-2015-9074

...

SaveExploits0
OpenVAS
OpenVAS
added 2021/11/08 12:00 a.m.32 views

Mozilla Firefox Security Advisory (MFSA2016-89) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

9.8CVSS7.9AI score0.12263EPSS
SaveExploits4References21
Tenable Nessus
Tenable Nessus
added 2021/11/03 12:00 a.m.48 views

SUSE SLED12: binutils / binutils-devel / binutils-gold / cross-ppc-binutils / etc (SUSE-SU-2021:3593-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3593-1 advisory. Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for the...

7.8CVSS7AI score0.02752EPSS
SaveExploits18References68
Rows per page
Query Builder