1966 matches found
Microsoft Azure Linux Virtual Machines ๅฎๅ จๆผๆด
Microsoft Azure Linux Virtual Machines are cloud computing infrastructure resources provided by Microsoft. They are on-demand, elastic, and support multiple mainstream Linux distributions. There are security vulnerabilities associated with Microsoft Azure Linux Virtual Machines. Attackers can...
Linux Distros Unpatched Vulnerability : CVE-2026-3544
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2026-2770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...
Linux Distros Unpatched Vulnerability : CVE-2026-2791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
NVIDIA Cumulus LinuxๅNVIDIA NVOS ๅฝไปคๆณจๅ ฅๆผๆด
NVIDIA Cumulus Linux and NVIDIA NVOS are both products of NVIDIA Corporation, a US-based company. NVIDIA Cumulus Linux is a powerful open-source network operating system. NVIDIA NVOS is also an operating system. Both NVIDIA Cumulus Linux and NVIDIA NVOS have command injection vulnerabilities, whi...
Linux Distros Unpatched Vulnerability : CVE-2026-2369
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This c...
RHEL 9 : kernel-rt (RHSA-2026:1946)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1946 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
Linux Distros Unpatched Vulnerability : CVE-2026-25541
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the...
Linux Distros Unpatched Vulnerability : CVE-2026-1207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on RasterField only implemented on PostGIS allows remote...
Linux Distros Unpatched Vulnerability : CVE-2026-21936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0...
Linux Distros Unpatched Vulnerability : CVE-2020-36986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prey 1.9.6 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated privileges. Attackers can exploit t...
January Linux Patch Wednesday
JanuaryLinux Patch Wednesday. In January, Linux vendors started fixing 918 vulnerabilities, one and a half times more than in December. Of these, 616 are in the Linux Kernel. Three show signs of exploitation in the wild: ๐ป AuthBypass - GNU Inetutils telnetd CVE-2026-24061 ๐ป RCE - Safari...
MiracleLinux 4 : httpd-2.2.15-15.1.0.1.AXS4 (AXSA:2012-205:03)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-205:03 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2011-3607 Integer overflow i...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-1999-0414
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection...
CVE-2025-1079
Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature...
Vulnerabilities of the functions mxc_isi_m2m_vb2_buffer_queue(), mxc_isi_m2m_vb2_stop_streaming(), and mxc_isi_m2m_s_fmt_vid() in the Linux operating system, allowing a hacker to trigger a service failure
The vulnerabilities of the functions mxcisim2mvb2bufferqueue, mxcisim2mvb2stopstreaming, and mxcisim2msfmtvid in the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...
Linux Distros Unpatched Vulnerability : CVE-2025-13674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service CVE-2025-13674 Note that Nessus relies on the presence of the package as reported by the vendor...
Vulnerabilities of functions init_kcs_data_with_state(), start_kcsTransaction(), and kcs_event() in the Linux operating system, allowing a hacker to cause a service failure
The vulnerabilities of the initkcsdatawithstate, startkcsTransaction, and kcsevent functions in the Linux operating system are related to the execution of a loop with an unreachable exit condition. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
November Microsoft Patch Tuesday
November Microsoft Patch Tuesday. A total of 65 vulnerabilities. I'm not comparing this with the October report because I've decided to cover only MSPT-day vulnerabilities. The thing is, Microsoft has started massively adding Linux-product vulnerabilities to their official website, and these...