30673 matches found
CVE-2012-10060
Sysax Multi Server versions prior to 5.55 contains a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code...
CVE-2023-5342 Shim: expired secure boot certificate
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...
CVE-2023-5342 Shim: expired secure boot certificate
The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...
CVE-2023-5342
CVE-2023-5342 affects the Fedora shim’s Secure Boot validation by an expired Fedora Secure Boot CA certificate shipped with shim. Root cause: expiration of the CA cert used to sign boot components, allowing the loading of old/invalid signed boot components. Impact: potential to load outdated or i...
Vulnerabilities fixed in Cisco Secure Firewall Software
Cisco has fixed multiple vulnerabilities in Cisco Secure Firewall Software including ASA and FTD. The vulnerabilities are in the way Cisco Secure Firewall handles key exchange IKEv2, with this it is possible for an unauthenticated attacker to perform a denial-of-service attack. The vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2019-20908
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivarssdt ACPI variable could be use...
Linux Distros Unpatched Vulnerability : CVE-2022-21505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the linux kernel, if IMA appraisal is used with the imaappraise=log boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabl...
Linux Distros Unpatched Vulnerability : CVE-2023-6211
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicki...
The vulnerability in the web client of IBM Datacap Navigator software, which is used for collecting and processing documents with IBM Datacap, allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the IBM Datacap Navigator web client software for document collection and processing lies in the absence of a “Secure” flag in the session cookies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
The vulnerability of the RADIUS protocol implementation (Remote Authentication in Dial-In User Service) of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a perpetrator to execute arbitrary commands.
The vulnerability of the RADIUS protocol Remote Authentication in Dial-In User Service implementation in Cisco Secure Firewall Management Center software formerly known as Cisco Firepower Management Center is related to incorrect elimination of certain elements in the output data. Exploiting this...
Malicious code in meta-error-secure-encode-refactor (npm)
The package meta-error-secure-encode-refactor was found to contain malicious code...
Malicious code in aws-secure-zipper (npm)
The package aws-secure-zipper was found to contain malicious code...
Malicious code in secure-docs-app (npm)
The package secure-docs-app was found to contain malicious code...
Malicious code in serialize-stub-secure-protected-psi (npm)
The package serialize-stub-secure-protected-psi was found to contain malicious code...
Malicious code in fast-long-secure-function-bundle (npm)
The package fast-long-secure-function-bundle was found to contain malicious code...
MAL-2025-32880 Malicious code in secure_identity_login_module (npm)
The package secureidentityloginmodule was found to contain malicious code...
MAL-2025-27738 Malicious code in notify-index-secure-process-cron (npm)
The package notify-index-secure-process-cron was found to contain malicious code...
MAL-2025-20238 Malicious code in fast-long-secure-function-bundle (npm)
The package fast-long-secure-function-bundle was found to contain malicious code...