6414 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-9187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so...
WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Ziston versions 1.4.5...
WordPress Indutri Theme < 1.3.0 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Indutri versions 1.3.0...
Linux Distros Unpatched Vulnerability : CVE-2024-21164
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Difficult ...
Linux Distros Unpatched Vulnerability : CVE-2021-41165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all...
Linux Distros Unpatched Vulnerability : CVE-2023-22795
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regular expression based DoS vulnerability in Action Dispatch 6.1.7.1 and 7.0.4.1 related to the If- None-Match header. A specially crafted HTTP If-None-Match...
AZL-66753 CVE-2025-58058 affecting package jx for versions less than 3.10.182-3
xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...
AZL-66744 CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12
xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...
CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1
CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1. An upgraded version of the package is available that resolves this issue...
WordPress Pin WP theme < 7.2 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Pin WP versions 7.2...
WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin SUMO Memberships for WooCommerce versions 7.8.0...
Drupal Facets module < 2.0.10,3.0.0 - Authenticated Cross Site Scripting (XSS) vulnerability
Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Facets versions 2.0.10,3.0.0...
Linux Distros Unpatched Vulnerability : CVE-2025-3573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a...
Linux Distros Unpatched Vulnerability : CVE-2020-8163
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to...
Linux Distros Unpatched Vulnerability : CVE-2019-1010017
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libnmap v0.6.3 is affected by: XML Injection. The impact is: Denial of service DoS by consuming resources. The component is: XML Parsing. The attack vector is:...
Linux Distros Unpatched Vulnerability : CVE-2022-23478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of...
Drupal Protected Pages module < 1.8.0 - Unauthenticated Broken Access Control vulnerability
Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Protected Pages versions 1.8.0...
CVE-2025-8715 affecting package postgresql for versions less than 16.10-1
CVE-2025-8715 affecting package postgresql for versions less than 16.10-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-8713 affecting package postgresql for versions less than 16.10-1
CVE-2025-8713 affecting package postgresql for versions less than 16.10-1. An upgraded version of the package is available that resolves this issue...