24999 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-41689
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even...
Linux Distros Unpatched Vulnerability : CVE-2018-14456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cpp. CVE-2018-14456 Note that Nessus relie...
Linux Distros Unpatched Vulnerability : CVE-2024-31837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938. CVE-2024-31837 Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2024-7885
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs whe...
PT-2025-40648
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue exists in the wilc1000 driver related to WID string configuration. The problem occurs during the parsing of response frames, specifically when copying data into t...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
Malicious code in function-string (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41570 Malicious code in function-string (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
CVE-2025-52054
The Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router is vulnerable in Firmware 16.03.33.05 due to an improper authentication procedure. The device calculates the root password using a predictable method: a static string combined with the last two octets of the device's MAC address . This f...
SUSE CVE-2025-55298
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper...
CVE-2024-32502
creationtimestamp| type| source ---|---|--- 2025-08-27 21:18:29+00:00| seen| Telegram/3cCxfL420ujsni81Rfhu21hSQiYHtmg5WmuB39zsoXQ6uw...
VulnCheck KEV: CVE-2024-33434
An issue in tiagorlampert CHAOS v5.0.1 before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the filename argument into the buildStr string without any sanitization or filteri...
Linux Distros Unpatched Vulnerability : CVE-2019-18848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string. CVE-2019-18848 Note that Nessus relies on the presence of t...
Linux Distros Unpatched Vulnerability : CVE-2024-55193
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/stringview.h. CVE-2024-55193 Note that Nessus relies o...
Linux Distros Unpatched Vulnerability : CVE-2019-9211
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a reachable assertion abort in the function writelongstringmissingvalues in data/sys-file- writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to...
PT-2025-35091
Name of the Vulnerable Software and Affected Versions Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router versions 16.03.33.05 Description An issue exists where the root password of the device is calculated using a static string and the last two octets of the device's MAC address. This allows...
Linux Distros Unpatched Vulnerability : CVE-2018-16418
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply craft...