Lucene search
K

2080 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2025-0927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - linux - None Ubuntu Linux - fs: hfs/hfsplus: add keylen boundary check to hfsbnodereadkey CVE-2025-0927 Note that Nessus relies on the presence o...

6.9AI score
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-26842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with...

7.5CVSS5.5AI score0.00287EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-26844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag. CVE-2025-26844 Note that Nessus relies on the presence of the package...

9.8CVSS5.5AI score0.00366EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-26846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata. CVE-2025-26846...

9.8CVSS5.5AI score0.00404EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2025-22870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set...

4.4CVSS6.7AI score0.00032EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2025/02/24 12:0 a.m.9 views

Debian: Security Advisory (DLA-4062-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.4365EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-27819

Name of the Vulnerable Software and Affected Versions: MediaWiki versions affected versions not specified Description: The issue concerns package vulnerabilities in MediaWiki within Debian Linux. No further details are provided about the nature of the issue or its potential impact. Recommendation...

5.5CVSS5.2AI score0.00014EPSS
Exploits0References18
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-19814 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in znuny within Debian Linux. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

9.1CVSS6.2AI score0.00298EPSS
Exploits0References17
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-41495

Name of the Vulnerable Software and Affected Versions Chromium versions prior to 141.0.7390.65 Microsoft Edge versions prior to 141.0.7390.65 Description A use-after-free issue exists in the Storage component of Google Chrome and Microsoft Edge browsers. Exploitation of this issue could allow a...

10CVSS9AI score0.00125EPSS
Exploits1References24
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-11335 · Unknown +4 · Ghostscript +4

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue is related to a buffer overflow that occurs during the serialization of DollarBlend in font. Additionally, there are package vulnerabilities in ghostscript. Recommendations: ...

9.8CVSS6.1AI score0.00212EPSS
Exploits0References75
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-54588

Name of the Vulnerable Software and Affected Versions fastdds affected versions not specified Description The description does not provide details about the nature of the issue. It only indicates the presence of package vulnerabilities in fastdds within Debian Linux. Recommendations At the moment...

6.3CVSS5.4AI score0.00028EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-14568

Name of the Vulnerable Software and Affected Versions Debian Linux affected versions not specified Description The issue concerns package vulnerabilities in gnuplot within Debian Linux. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

6.2CVSS6.7AI score0.00167EPSS
Exploits0References38
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-27033

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in libssh. No further details are available due to the lack of information in the provided descriptions. Recommendations: At the moment, ther...

8.8CVSS6.4AI score0.01231EPSS
Exploits0References72
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.7 views

PT-2025-20574

Name of the Vulnerable Software and Affected Versions Rust's Ring package affected versions not specified Debian Linux affected versions not specified Description A flaw in Rust's Ring package can trigger a panic when overflow checking is enabled. This issue can be exploited in the QUIC protocol ...

9.8CVSS8.1AI score0.00263EPSS
Exploits4References39
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-28866

Name of the Vulnerable Software and Affected Versions: git in Debian Linux affected versions not specified Description: A flaw exists in Git GUI that allows for the creation and overwriting of arbitrary writable files. This occurs when a user clones an untrusted repository and is subsequently...

8.6CVSS8.2AI score0.03365EPSS
Exploits11References130
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-19380 · Glib2.0 +1 · Glib2.0 +1

Name of the Vulnerable Software and Affected Versions: glib2.0 versions affected versions not specified Description: The issue is related to an integer overflow in the protect argv string method. It affects the glib2.0 package in Debian Linux. No information is provided about the estimated number...

7.5CVSS4AI score0.00262EPSS
Exploits0References15
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-11966 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions affected versions not specified Description: The issue is related to the af-packet defrag option, which can lead to truncated packets. This affects Suricata in Debian Linux. No information is provided about the estimated...

10CVSS7.2AI score0.00097EPSS
Exploits0References42
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-19756 · Chromium +3 · Chromium +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 136.0.7103.59 chromium in Debian Linux affected versions not specified Description: The issue is related to insufficient data validation in DevTools, allowing a remote attacker to bypass discretionary access...

9.8CVSS6.4AI score0.00304EPSS
Exploits0References40
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-19757 · Chromium +3 · Chromium +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 136.0.7103.59 chromium in Debian Linux affected versions not specified Description: The issue is related to an inappropriate implementation in DevTools, allowing a remote attacker to bypass discretionary access...

9.8CVSS8.3AI score0.00304EPSS
Exploits0References47
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.4 views

PT-2025-27759

Name of the Vulnerable Software and Affected Versions: MediaWiki versions affected versions not specified Description: The issue concerns package vulnerabilities in MediaWiki, specifically within Debian Linux. No further details are provided about the nature of the issue or its potential impact...

2.1CVSS5.2AI score0.00021EPSS
Exploits0References9
Rows per page
Query Builder