654 matches found
Linux Distros Unpatched Vulnerability : CVE-2013-2024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OS command injection vulnerability in the qs procedure from the utils module in Chicken before 4.9.0. CVE-2013-2024 Note that Nessus relies on the presence of t...
Linux Distros Unpatched Vulnerability : CVE-2014-10064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will blo...
nginx 0.7.22 < 1.29.1 Information Disclosure
According to its Sever response header, the installed version of nginx is 0.7.22 prior to 1.29.1. It is, therefore, affected by the following issue : - NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SM...
CVE-2025-38743
Dell iDRAC Service Module iSM, versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...
CVE-2025-54363
Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...
Nginx 0.7.22 - 1.29.0 Information Disclosure Vulnerability
Nginx is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx";...
PT-2025-33798 · Mt76 +1 · Mt76 +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The mt7925 mcu hw scan function in the mt76 module contains an off-by-one error. This occurs because the comparison operator used to check array bounds is incorrect, potentially leadin...
Linux Distros Unpatched Vulnerability : CVE-2017-16137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters ...
CVE-2025-8941
A flaw was found in linux-pam. The pamnamespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020...
Linux Distros Unpatched Vulnerability : CVE-2020-1934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server. CVE-2020-1934 Note that Nessus relies o...
Linux Distros Unpatched Vulnerability : CVE-2025-37995
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - module: ensure that kobjectput is safe for module type kobjects In 'lookuporcreatemodulekobject', an internal kobject is created using 'modulektype'. So call to...
Linux Distros Unpatched Vulnerability : CVE-2022-50138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/qedr: Fix potential memory leak in qedrallocmr qedrallocmr allocates a memory chunk for mr-info.pbltable with initmrinfo. When rdmaalloctid and...
Linux Distros Unpatched Vulnerability : CVE-2021-3679
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a...
Linux Distros Unpatched Vulnerability : CVE-2017-6266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a...
Linux Distros Unpatched Vulnerability : CVE-2014-9016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes aka phpass module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to...
CVE-2025-54646
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...
CVE-2025-54646
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability may affect performance...
CVE-2025-54646
The CVE-2025-54646 entry concerns Huawei HarmonyOS/EMUI with an inadequate packet length check in the BLE module. The root cause is a faulty packet length validation in the BLE component, leading to potential performance impact when exploited. Public data provides two CVSS vectors: NVD’s CVSSv3.1...
CVE-2025-54633
Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-54632
Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity...