18425 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-53744
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: ti: pm33xx: Fix refcount leak in am33xxpmprobe wkupm3ipcget takes refcount, which should be freed by wkupm3ipcput. Add missing refcount release in the erro...
PT-2025-49816
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An attacker can utilize an undocumented UART Universal Asynchronous Receiver-Transmitter, a hardware communication protocol port on the PCB as a side-channel to...
CVE-2025-62470: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a cifs session state checking issue...
KLA90811 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions, cause denial of service, spoof user interface. Below is a...
CVE-2023-53751
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCPServerInfo::hostname TCPServerInfo::hostname may be updated once or many times during reconnect, so protect its access outside reconnect path as well and then prevent any potential...
Fedora: Security Advisory (FEDORA-2025-64091db7e0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-14245: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the argument params leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...
Debian dla-4397 : liblasso-perl - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4397 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4397-1 [email protected]...
Apache HTTP Server: CGI environment variable override
...
SUSE CVE-2025-65082
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through...
CVE-2019-15576 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
CVE-2018-18640 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
UBUNTU-CVE-2025-58098
Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query string to exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue...
CGA-J835-H4VF-357P
Bulletin has no description...
CGA-GC5M-FH7G-93XP
Bulletin has no description...
Exploit for CVE-2025-55182
⚠️ Warning: Used only for authorization security testing. Pleas...
Mattermost Unauthorized Access
The vulnerability of the Mattermost instant messaging application is related to insufficient protection of sensitive data during the processing of the /api/v4/channels/channelid/commonteams endpoint. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
Apache HTTP Server security vulnerabilities
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A security bypass vulnerability exists in Apache HTTP Server versions 2.4.0 through 2.4.65 due to incorrect neutralization of...