Lucene search
+L

22660 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2016-10228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iconv program in the GNU C Library aka glibc or libc6 2.31 and earlier, when invoked with multiple suffixes in the destination encoding TRANSLATE or IGNORE...

5.9CVSS6.2AI score0.04006EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/03 6:44 p.m.•20 views

USN-7294-4 linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

9.8CVSS6.7AI score0.03395EPSS
SaveExploits2References145
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2010-0015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries...

7.5CVSS5.4AI score0.03126EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2009-5155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service...

7.5CVSS6AI score0.03906EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2011-1658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which mig...

3.7CVSS6.3AI score0.00311EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/01 4:22 p.m.•22 views

CVE-2025-1755

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\nodemodules\. This issue affects MongoDB Compass prior to 1.42.1...

7.8CVSS6.6AI score0.00147EPSS
SaveExploits0References3
Fedora
Fedora
•added 2025/03/01 1:24 a.m.•22 views

[SECURITY] Fedora 41 Update: iniparser-4.2.4-3.fc41

iniParser is an ANSI C library to parse "INI-style" files, often used to hold application configuration information...

5.1CVSS6.8AI score0.00229EPSS
SaveExploits0
Fedora
Fedora
•added 2025/03/01 1:24 a.m.•23 views

[SECURITY] Fedora 41 Update: cutter-re-2.3.4-6.fc41

Cutter is a Qt and C++ GUI for Rizin. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...

9.1CVSS9.4AI score0.01202EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/02/28 5:11 p.m.•12 views

CVE-2025-24316 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies

The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality...

6.9CVSS5.3AI score0.00309EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 5:09 p.m.•9 views

CVE-2025-24318 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise...

6.8CVSS6.6AI score0.0035EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 5:09 p.m.•37 views

CVE-2025-24318 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise...

6.8CVSS0.0035EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 5:04 p.m.•37 views

CVE-2025-20049 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

7.1CVSS0.00299EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 4:58 p.m.•8 views

CVE-2025-24849 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure...

7.5CVSS7AI score0.0009EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 4:56 p.m.•12 views

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS5.3AI score0.00152EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 4:56 p.m.•24 views

CVE-2025-24843 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data...

5.1CVSS0.00152EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 4:54 p.m.•33 views

CVE-2025-23405 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Improper Output Neutralization For Logs

Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks ex log injection...

6.9CVSS0.00291EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 4:51 p.m.•24 views

CVE-2025-20060 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Private Personal Information to an Unauthorized Actor

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

8.7CVSS0.00398EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/28 11:08 a.m.•16 views

OESA-2025-1202 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its parent device, but without keeping a reference to it. When registeri...

7.8CVSS6.2AI score0.00263EPSS
SaveExploits0References8
Ubuntu
Ubuntu
•added 2025/02/28 10:36 a.m.•40 views

USN-7294-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

9.8CVSS6.7AI score0.03395EPSS
SaveExploits2
OSV
OSV
•added 2025/02/28 10:36 a.m.•29 views

USN-7294-3 linux-ibm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

9.8CVSS6.7AI score0.03395EPSS
SaveExploits2References145
Rows per page
Query Builder