Lucene search
+L

4842 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-37311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the application's listening port...

7.5CVSS7.1AI score0.00927EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-2543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sndseqioctlremoveevents function in sound/core/seq/seqclientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment before proceeding with FI...

6.2CVSS6.5AI score0.00523EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2017-13689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint. CVE-2017-13689 Note that Nessus relies on the presence of the...

9.8CVSS7AI score0.03241EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2019-5827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM...

8.8CVSS6.8AI score0.01976EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2016-9815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host panic by sending an asynchronous abort. CVE-2016-9815 Note that Nessus relie...

6.5CVSS6.8AI score0.00464EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2020-11760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. CVE-2020-11760 Note tha...

5.5CVSS6.5AI score0.01807EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2014-3424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp. temporary file...

3.3CVSS7.6AI score0.00344EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/01 1:15 p.m.15 views

CVE-2025-1788

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rzutf8encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the...

7.8CVSS0.00299EPSS
SaveExploits1References7
OSV
OSV
added 2025/03/01 12:31 p.m.8 views

CVE-2025-1788 rizinorg rizin utf8.c rz_utf8_encode heap-based overflow

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rzutf8encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the...

4.8CVSS5.5AI score
SaveExploits0References9
OSV
OSV
added 2025/03/01 12:00 a.m.28 views

ASB-A-373638114

In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS6.8AI score0.00095EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/28 7:28 a.m.11 views

MGASA-2025-0083 Updated radare2 packages fix security vulnerabilities

A vulnerability, which was classified as problematic, was found in radare2. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public a...

4.8CVSS6.7AI score0.00309EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/02/25 1:45 p.m.17 views

CVE-2024-51539

The Dell Secure Connect Gateway SCG Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attack...

2.3CVSS0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/25 1:45 p.m.7 views

CVE-2024-51539

The Dell Secure Connect Gateway SCG Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attack...

2.3CVSS4AI score0.0019EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/24 2:15 p.m.5 views

ALPINE-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

5.5CVSS5.9AI score0.00335EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/02/24 12:00 a.m.6 views

PT-2025-7714 · Unknown +6 · Libarchive +6

Name of the Vulnerable Software and Affected Versions: libarchive versions up to 3.7.7 Description: A problematic issue was found in libarchive, affecting the list function of the file bsdunzip.c. This issue leads to a null pointer dereference. The attack can be launched on the local host...

7.8CVSS3.7AI score0.0036EPSS
SaveExploits2References51
OSV
OSV
added 2025/02/17 5:15 a.m.26 views

UBUNTU-CVE-2025-1377

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelfgetsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been...

5.5CVSS4.9AI score0.00319EPSS
SaveExploits1References10
OSV
OSV
added 2025/02/17 5:15 a.m.9 views

UBUNTU-CVE-2025-1376

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The...

4.7CVSS4.6AI score0.00303EPSS
SaveExploits1References5
CVE
CVE
added 2025/02/17 5:00 a.m.97 views

CVE-2025-1377

CVE-2025-1377 affects GNU elfutils 0.192, specifically the function gelf_getsymshndx in eu-strip/strip.c. The vulnerability allows a local attacker to cause a denial of service. Several connected advisories confirm the same issue and cite the patch identifier fbf1df9ca286de3323ae541973b08449f8d03...

5.5CVSS6.8AI score0.00319EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2025/02/17 3:15 a.m.10 views

CVE-2025-1370

A vulnerability, which was classified as critical, has been found in MicroWorld eScan Antivirus 7.0.32 on Linux. Affected by this issue is the function sprintf of the file epsdaemon of the component Autoscan USB. The manipulation leads to os command injection. An attack has to be approached...

4.8CVSS5.2AI score0.02309EPSS
SaveExploits1References3
NVD
NVD
added 2025/02/17 3:15 a.m.15 views

CVE-2025-1372

A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dumpdatasection/printstringsection of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to b...

7.8CVSS0.00343EPSS
SaveExploits1References8
Rows per page
Query Builder