Linux Distros Unpatched Vulnerability : CVE-2020-14827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: LDAP Auth. Supported versions that are affected are 5.7.31 and prior and...

Linux Distros Unpatched Vulnerability : CVE-2019-9820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This...

Linux Distros Unpatched Vulnerability : CVE-2017-6927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain JavaScript function which is used to escape potentially dangerous...

CVE-2025-55188

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

CVE-2025-55188

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

PT-2025-33057

Name of the Vulnerable Software and Affected Versions: ABB AbilityTM zenon versions 7.50 through 14 Description: A missing authentication flaw exists in ABB AbilityTM zenon that allows unauthorized access to a critical function. Recommendations: ABB AbilityTM zenon versions 7.50 through 14:...

KLA86580 SB vulnerability in 7-Zip

Insufficient validation vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-55188 Related products 7-Zip CVE list CVE-2025-55188 warning Solution Update to the latest version Download 7-Zip Impacts SB...

7-Zip 安全漏洞

7-Zip is a compression software from the 7-Zip open source. A security vulnerability exists in versions prior to 7-Zip 25.01 that stems from symbolic links not being handled correctly during decompression...

CVE-2025-55188

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

PT-2025-32360 · Ibm · Ibm Digital Certificate Manager For I +1

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.3 through 7.6 Description: An authenticated user without administrator privileges can exploit a web session hijacking issue in IBM Digital Certificate Manager for i DCM to perform administrative actions. Recommendations: IBM ...

CVE-2025-55188

7-Zip (7z) before 25.01 is vulnerable to arbitrary file write via improper handling of symbolic links during extraction. The issue is triggered when extracting crafted archives with vulnerable 7-Zip, potentially allowing a symlink to cause overwriting of arbitrary files on the target system. Conn...

Linux Distros Unpatched Vulnerability : CVE-2015-3231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed b...

Linux Distros Unpatched Vulnerability : CVE-2024-44993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in v3dcsdjobrun When enabling UBSAN on Raspberry Pi 5, we ge...

CVE-2025-55188

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

WordPress CF7 WOW Styler Plugin <= 1.7.2 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin CF7 WOW Styler versions = 1.7.2...

DoS (Denial of Service) Third-Party Dependency in Jira Software Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 9.12.0, 10.3.0, 10.6.0, and 10.7.1 of Jira Software Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allo...

PT-2025-32317 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM version 7.14.6 Description: SuiteCRM is an open-source Customer Relationship Management CRM software application. A vulnerability exists that allows unauthenticated downloads of any file from the upload-directory, provided the file i...

Linux Distros Unpatched Vulnerability : CVE-2016-3169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the...

Oracle Linux 7 : libblockdev (ELSA-2025-10796)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10796 advisory. - Don't allow suid and dev set on fs resize CVE-2025-6019 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 7 : firefox (ELSA-2025-12278)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-12278 advisory. 128.13.0-1.0.1 - Update to 128.13.0 Orabug: 38256809CVE-2025-8027CVE-2025-8028 CVE-2025-8029CVE-2025-8030CVE-2025-8031CVE-2025-8032CVE-2025-8033...