Fedora 41 : perl-Cpanel-JSON-XS (2025-89495f6403)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-89495f6403 advisory. This update fixes an issue where a specially-crafted JSON input could cause an integer overflow leading to a crash in the program parsing the JSON...

CVE-2025-23328

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the comliferayportalsearchwebportletSearchPortletuserId parameter. An attacker can execute arbitrary web scripts or inject malicious HTML by supplying crafted input. Details Cross-site scripting or XSS is a...

CVE-2025-43801

Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via improper handling of memory operations. An attacker can execute arbitrary code by triggering memory corruption through crafted input. Remediation Upgrade thunderbird-ESR to version 140.3 or higher. References - Mozil...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via improper handling of memory operations. An attacker can execute arbitrary code by triggering memory corruption through crafted input. Remediation Upgrade thunderbird to version 143.0 or higher. References - Mozilla...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via improper handling of memory operations. An attacker can execute arbitrary code by triggering memory corruption through crafted input. Remediation Upgrade Firefox to version 143.0 or higher. References - Mozilla...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via improper handling of memory operations. An attacker can execute arbitrary code by triggering memory corruption through crafted input. Remediation Upgrade Firefox-ESR to version 140.3 or higher. References - Mozilla...

CVE-2022-50313

Summary: CVE-2022-50313 affects the Linux kernel (EROF S subsystem). The root cause is that the i_size field is signed; crafted negative i_size can be interpreted as a fast symlink, triggering an order = MAX_ORDER warning. The fix changes the handling to fall back to the generic path for such unu...

CVE-2025-45587

A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-45587

A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service DoS via a crafted input...

Security update for perl-Cpanel-JSON-XS

This update for perl-Cpanel-JSON-XS fixes the following issues: CVE-2025-40929: integer buffer overflow causing a segmentation fault when parsing crafted JSON bsc1249331. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...

CVE-2025-45587

CVE-2025-45587 describes a stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 that allows attackers to cause a Denial of Service (DoS) via a crafted input. Affected component is the FTP service; root cause is a stack overflow. Documented impact: availability impact h...

CVE-2025-45587

A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service DoS via a crafted input...

GitLab 7.12 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-2256)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - The vulnerability exists due to insufficient validation of user-supplied input in SAML responses. A remote attacker can pass specially crafted input to the application and perform a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-20001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Libav 12.3, there is a floating point exception in the rangedecodeculshift function called from rangedecodebits in libavcodec/apedec.c that will lead to remo...

Linux Distros Unpatched Vulnerability : CVE-2018-7867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead ...

Linux Distros Unpatched Vulnerability : CVE-2015-3027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which...

Linux Distros Unpatched Vulnerability : CVE-2022-43033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4HdlrAtom::AP4HdlrAtom which allows attackers to cause a Denial of Service D...

Improper Input Validation

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Improper Input Validation in the authentication process. An attacker can gain unauthorized access to user sessions by submitting crafted input, potentially leading to sessi...