CVE-2024-58047

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Linux Distros Unpatched Vulnerability : CVE-2023-25440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stored Cross Site Scripting XSS vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name...

CVE-2024-58047

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58046

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Keysight Ixia Vision Product Family (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this these...

Linux Distros Unpatched Vulnerability : CVE-2014-3476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2017-10285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 6u161, 7u151,...

Linux Distros Unpatched Vulnerability : CVE-2017-18008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. CVE-2017-18008 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-11627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the...

KLA81177 DoS vulnerability in Mozilla Firefox ESR

Denial of service vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2025-16 Related products Mozilla-Firefox-ESR CVE list CVE-2025-1932 critical Solution Update to the latest version Download Firefox...

Linux Distros Unpatched Vulnerability : CVE-2018-19208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of...

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

CVE-2024-0392

CVE-2024-0392 describes a CSRF vulnerability in the management console of WSO2 Enterprise Integrator 6.6.0 caused by the absence of CSRF token validation. The vulnerability can enable an attacker to trigger certain state-changing operations on behalf of an authenticated user via crafted requests,...

Denial Of Service (DoS)

Libming is vulnerable to Denial Of Service DoS. The vulnerability is due to improper memory management due to the readSizedString function in util/read.c failing to release allocated memory, allowing attackers to cause a denial of service via a crafted file...

The vulnerability of the Linux operating system’s kernel tracing component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel tracing component is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-46975 GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory...

CVE-2025-20059

CVE-2025-20059 : Affected product is Ping Identity PingAM Java Policy Agent. The issue is a relative path traversal that enables parameter injection in PingAM Policy Agent components. Affects versions through 5.10.3, through 2023.11.1, and through 2024.9. Impact (as per CVSS metrics in the initia...

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

ROS-20250220-02

A vulnerability in the ksmbddecodentlmsspauthblob function of the ksmbd module of the Linux kernel is related to a heap-based buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...