91 matches found
MiracleLinux 7 : sssd-1.16.5-10.el7.15 (AXSA:2023-4853:02)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-4853:02 advisory. sssd: libssscertmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Tenable has extracted the preceding description block directly from...
CVE-2019-11366
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the threadlistmutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If threaddata is NULL when assigned to current, a...
Mozilla Thunderbird < 10.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 10.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2012-06 advisory. - Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize...
Unbreakable Enterprise kernel security update
5.4.17-2136.350.3.1 - Reapply 'cpuidle: menu: Avoid discarding useful information' Harshvardhan Jha Orabug: 38744458 - fbcon: fix integer overflow in font allocation Samasth Norway Ananda Orabug: 38744453 5.4.17-2136.350.3 - net/rds: Fix rsrecvpending counting issue Gerd Rausch Orabug: 38506370...
Google Chrome < 4.1.0.21 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 4.1.0.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 201503stable-channel-update advisory. - Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM...
TencentOS Server 4: curl (TSSA-2024:0355)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0355 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989957)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989957 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more dat...
EUVD-2017-6149
Malware in sbrugna...
EUVD-2014-1558
Malware in sbrugna...
EUVD-2019-5549
Malware in sbrugna...
EUVD-2013-4771
Malware in sbrugna...
EUVD-2020-20124
Malware in sbrugna...
EUVD-2018-20018
Malware in sbrugna...
EUVD-2011-1765
Malware in sbrugna...
EUVD-2021-17117
Malware in sbrugna...
EUVD-2021-31662
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-53226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: Fix OOB and integer underflow when rx packets Make sure mwifiexprocessmgmtpacket, mwifiexprocessstarxpacket and mwifiexprocessuaprxpacket,...
net/http: Request smuggling due to acceptance of invalid chunked data in net/http
A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...
CVE-2025-53983
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetElements For Elementor jet-elements allows Retrieve Embedded Sensitive Data.This issue affects JetElements For Elementor: from n/a through = 2.7.7...
Linux Distros Unpatched Vulnerability : CVE-2024-44936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: power: supply: rt5033: Bring back i2csetclientdata Commit 3a93da231c12 power: supply: rt5033...