3620 matches found
RHEL 6 : python-pygments (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-pygments: Shell injection in FontManager.getnixfontpath CVE-2015-8557 Note that Nessus has not tested for th...
MGASA-2024-0202 Updated gifsicle packages fix security vulnerability
gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c. CVE-2023-46009...
OPENSUSE-SU-2024:0146-1 Security update for gifsicle
This update for gifsicle fixes the following issues: Update to version 1.95: - CVE-2023-46009: Fixed floating point exception vulnerability via resizestream at src/xform.c boo1216403...
SUSE-SU-2024:1789-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating bsc1224388...
CVE-2021-47503
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Do not call scsiremovehost in pm8001alloc Calling scsiremovehost before scsiaddhost results in a crash: BUG: kernel NULL pointer dereference, address: 0000000000000108 RIP: 0010:devicedel+0x63/0x440 Call Trace:...
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
BELL-CVE-2023-52871
Bulletin has no description...
BELL-CVE-2023-52768
Bulletin has no description...
BELL-CVE-2023-52757
Bulletin has no description...
CVE-2021-47363
The CVE-2021-47363 issue is a Linux kernel vulnerability in the nexthop path where a resilient nexthop group could cause a division by zero when a stub nh_res_table with zero buckets is assigned during replacement while traffic is flowing. Roots cause: the data path could still reference the old ...
BELL-CVE-2024-35921
Bulletin has no description...
BELL-CVE-2024-35850
Bulletin has no description...
BELL-CVE-2023-52677
Bulletin has no description...
CVE-2024-35806
In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgrlock smpcallfunctionsingle disables IRQs when executing the callback. To prevent deadlocks, we must disable IRQs when taking cgrlock elsewhere. This is already done by...
Huawei EulerOS: Security Advisory for libtommath (EulerOS-SA-2024-1688)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-34096 ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-30041
Microsoft Bing Search Spoofing Vulnerability...
AZL-40679 CVE-2024-27397 affecting package hyperv-daemons for versions less than 5.15.158.2-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .insert, .deactivate and sync gc path to u...
