Linux Distros Unpatched Vulnerability : CVE-2017-16995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly...

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode

...

Malicious code in sendbird-notifications-extension-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db0ee25cfff1ec99d94cc0e5866df17eda725c53a92c98ce3057df8f5f23c9cc The OpenSSF Package Analysis project identified 'sendbird-notifications-extension-example' @ 1019.0.1 npm as malicious. It is considered malicio...

DEBIAN-CVE-2025-8576

Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2025-8576

Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2025-32989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.5...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-49180)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49180 advisory. - A flaw was found in the RandR extension, where the...

Linux Distros Unpatched Vulnerability : CVE-2021-47129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: skip expectations for confirmed conntrack nftctexpectobjeval calls...

CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2025-49176)

The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49176 advisory. - A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checki...

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

...

pgsql extension does not check for errors during escaping

...

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension

...

NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

...

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

...

Microsoft Intune Management Extension < 1.45.204.0 (CVE-2021-41363)

Security feature bypass vulnerability in the Microsoft Intune Management Extension 1.45.204.0. This vulnerability could allow an attacker to bypass security features in the Intune Management Extension. Exploiting this vulnerability requires the attacker to have local user privileges. %NASLMINLEVE...

Intune Management Extension(IME) Installed (Windows)

Binary data microsoftimeinstalled.nbin...

Linux Distros Unpatched Vulnerability : CVE-2019-11697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the ALT and a keys are pressed when users receive an extension installation prompt, the extension will be installed without the install prompt delay that kee...

Microsoft Intune Management Extension < 1.41.203.0 (CVE-2021-31980)

Remote code execution vulnerability in the Microsoft Intune Management Extension 1.41.203.0. The vulnerability allows an unauthenticated attacker to execute arbitrary code on a target machine over the network. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid243954;...

CVE-2012-10034 ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie

ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...

CVE-2025-29745

A vulnerability affecting the scanning module in Emsisoft Anti-Malware prior to 2024.12 allows attackers on a remote server to obtain Net-NTLMv2 hash information via a specially created A2S Emsisoft Custom Scan extension file...