Lucene search
K

89 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-46958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This i...

9.1CVSS5.8AI score0.00567EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-5981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct...

5.9CVSS6.5AI score0.01257EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/13 8:12 a.m.3 views

CVE-2025-7012 Cato Networks Linux Client Local Privilege Escalation via Symlink

An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling...

8.6CVSS7.2AI score0.00145EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:39 p.m.12 views

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

5.3CVSS6.8AI score0.22792EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:13 p.m.12 views

CVE-2020-8199

Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root...

7.8CVSS7AI score0.0039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:51 p.m.5 views

CVE-2020-8250

A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to escalate privilege...

7.8CVSS6.8AI score0.00477EPSS
Exploits0References1
Citrix
Citrix
added 2025/04/28 12:0 a.m.5 views

Enabling EDT Lost Tolerant Mode using Linux as client.

How to enable EDT Lost Tolerant Mode in the latest VDAs versions when using Linux as client, all requirements needed...

7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.1 views

The vulnerability of the `parse_server_interfaces()` function in the `fs/smb/client/smb2ops.c` module allows a hacker to compromise the integrity of protected information or cause service failures for the SMB kernel client of the Linux operating system.

The vulnerability of the parseserverinterfaces function in the fs/smb/client/smb2ops.c module, which is part of the SMB client support in Linux operating systems, involves a numerical port escape or cyclic shift vulnerability. Exploiting this vulnerability could allow an attacker to compromise th...

7.1CVSS6.5AI score0.00407EPSS
Exploits0References36Affected Software5
Citrix
Citrix
added 2025/04/01 12:0 a.m.7 views

Applying Modern UI patch for Citrix Storefront LTSR2402 CU2 (to support CWA Linux Clients)

Symptoms or Error When users on Linux login to their Citrix Workspace App for Linux , they see an infinite progress screen or error instead of seeing the list of their apps and desktops. This is applicable only for customers where the admins have 1. Upgraded their StoreFronts to the new Storefron...

6.9AI score
Exploits0
OSV
OSV
added 2024/08/25 5:15 p.m.3 views

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

5.3CVSS5.8AI score0.0044EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/08/25 12:0 a.m.18 views

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

0.0044EPSS
Exploits1References2
CVE
CVE
added 2024/08/25 12:0 a.m.62 views

CVE-2023-48957

CVE-2023-48957 concerns the PureVPN Linux client (2.0.2-Productions) where the DNS query handling is flawed, allowing DNS requests to bypass the VPN tunnel and go directly to the ISP/default DNS servers. The root cause is an improper DNS query handling/control flow in the client, per connected ad...

5.3CVSS7AI score0.0044EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/25 12:0 a.m.15 views

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

7AI score0.0044EPSS
Exploits1References2
CNVD
CNVD
added 2024/06/04 12:0 a.m.5 views

Ivanti Secure Access Client for Linux Elevation of Privilege Vulnerability

Ivanti Secure Access Client for Linux is a solution for enabling secure remote access, supporting SSL VPN connections and allowing users to securely access internal network resources e.g., administrative systems, applications, etc. from off-campus. An elevation of privilege vulnerability exists i...

7.3CVSS7.9AI score0.0031EPSS
Exploits0References1
OSV
OSV
added 2024/05/31 6:15 p.m.2 views

CVE-2023-46810

A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root...

7.3CVSS5.9AI score0.0031EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/05/21 3:15 p.m.27 views

CVE-2021-47366

In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read...

5.5CVSS5.7AI score0.00208EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/21 12:0 a.m.5 views

PT-2024-4023 · Ivanti · Ivanti Secure Access Client For Linux

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client for Linux versions prior to 22.7R1 Description: A local privilege escalation issue allows a low-privileged user to execute code as root. The vulnerability is related to a buffer overflow in memory, which can be...

7.3CVSS7.9AI score0.0031EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2023/10/23 1:33 p.m.10 views

CVE-2023-28804 Linux ZCC allows unsigned updates, allowing elevated Code Execution

An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105...

8.2CVSS6.9AI score0.00242EPSS
Exploits0References1
OSV
OSV
added 2023/09/12 8:15 p.m.2 views

CVE-2023-39208

Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access...

7.5CVSS5.8AI score0.0054EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/07/25 12:0 a.m.5 views

PT-2023-5208 · Zoom · Zoom Desktop Client For Linux

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Linux versions prior to 5.15.10 Description: The issue is related to improper input validation in the Zoom Desktop Client for Linux, which may allow an unauthenticated user to conduct a denial of service via network...

7.5CVSS7.5AI score0.0054EPSS
Exploits0References7
Rows per page
Query Builder