8387 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-14939
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default. CVE-2019-14939 Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2021-39932
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all version...
Linux Distros Unpatched Vulnerability : CVE-2019-14733
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load in rad.cpp. CVE-2019-14733 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2020-14212
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 4.3 has a heap-based buffer overflow in aviogetstr in libavformat/aviobuf.c because dnnbackendnative.c calls ffdnnloadmodelnative and a certain...
Linux Distros Unpatched Vulnerability : CVE-2024-28578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Load function when reading image...
Linux Distros Unpatched Vulnerability : CVE-2021-36083
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE. CVE-2021-36083 Note that Nessus relies on the presence...
Linux Distros Unpatched Vulnerability : CVE-2018-5807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error within the samsungloadraw function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory...
Linux Distros Unpatched Vulnerability : CVE-2023-40549
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to loa...
DEBIAN-CVE-2025-38539
In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...
AZL-73572 CVE-2025-38539 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...
CVE-2025-38539
In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...
CVE-2025-38539
CVE-2025-38539 : Linux kernel tracing fix. When a module loads and adds trace events, it now takes the trace_event_sem for write while adding the event, preventing possible corruption of the ftrace_events list if two modules load simultaneously. The patch also adds a lockdep_assert_held() on the ...
CVE-2025-8143
The CVE-2025-8143 entry concerns the Soledad WordPress theme. It describes a Stored Cross-Site Scripting (XSS) vulnerability exploitable via the pcsml_smartlists_h parameter in all versions up to 8.6.7. The issue requires Contributor-level authentication or higher and allows an attacker to inject...
CVE-2025-8142 Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'headerlayout' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the serve...
Malicious code in rain-load-cloud-balance-runtime (npm)
The package rain-load-cloud-balance-runtime was found to contain malicious code...
MAL-2025-28219 Malicious code in omicron-load-import-stub-thread (npm)
The package omicron-load-import-stub-thread was found to contain malicious code...
MAL-2025-18703 Malicious code in down-lo-ad-now-zip-mp3-90774-post-self-c09pn-xqmqrm (npm)
The package down-lo-ad-now-zip-mp3-90774-post-self-c09pn-xqmqrm was found to contain malicious code...
MAL-2025-31572 Malicious code in rain-load-cloud-balance-runtime (npm)
The package rain-load-cloud-balance-runtime was found to contain malicious code...