3347 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-6872
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors. CVE-2016-6872 Note that...
Datart 安全漏洞
Datart is running-elephant's open source generation open platform for data visualization. A security vulnerability exists in Datart 1.0.0-rc3 and earlier versions, which stems from the use of hard-coded keys in the datart/security/src/main/java/datart/security/util/AESUtil.java file...
PT-2025-36428
Name of the Vulnerable Software and Affected Versions: Datart versions up to 1.0.0-rc3 Description: A vulnerability exists in Datart due to the use of a hard-coded cryptographic key within the getTokensecret function located in the datart/security/src/main/java/datart/security/util/AESUtil.java...
CVE-2025-48524
In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48524
In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26423
In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26423
In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26423
In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-36051
Name of the Vulnerable Software and Affected Versions: WifiPermissionsUtil affected versions not specified Description: The software may be susceptible to a permission bypass due to a missing permission check within the isSystem function of the WifiPermissionsUtil.java file. This could result in ...
Linux Distros Unpatched Vulnerability : CVE-2023-50711
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version...
Malicious code in main-util-validation (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41583 Malicious code in main-util-validation (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in requests-util (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41746 Malicious code in requests-util (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in request-util (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41743 Malicious code in request-util (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Linux Distros Unpatched Vulnerability : CVE-2022-0563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an INPUTRC environment variable to get...
Linux Distros Unpatched Vulnerability : CVE-2018-9246
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part...
Linux Distros Unpatched Vulnerability : CVE-2024-28085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv...
Linux Distros Unpatched Vulnerability : CVE-2020-7720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the...