37361 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-9196
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a negative-size-param issue in the ReadImage function in input- tga.c:528:7. CVE-2017-9196 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2020-8908
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a tempora...
Linux Distros Unpatched Vulnerability : CVE-2018-17082
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a Transfer-Encoding:...
Linux Distros Unpatched Vulnerability : CVE-2018-15919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 ...
Linux Distros Unpatched Vulnerability : CVE-2017-18027
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial o...
CVE-2025-26319
FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments...
Linux Distros Unpatched Vulnerability : CVE-2012-0037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redland Raptor aka libraptor before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows...
Linux Distros Unpatched Vulnerability : CVE-2013-1619
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a...
Linux Distros Unpatched Vulnerability : CVE-2016-10196
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2019-14235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri...
GHSA-769V-P64C-89PR PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions
CVE-2025-1889 Summary Picklescan fails to detect hidden pickle files embedded in PyTorch model archives due to its reliance on file extensions for detection. This allows an attacker to embed a secondary, malicious pickle file with a non-standard extension inside a model archive, which remains...
CVE-2025-25185
creationtimestamp| type| source ---|---|--- 2025-03-03 18:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7i2vin2a...
MAL-2025-2014 Malicious code in configs-web-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e2873a2ee1e0748ca75f7e661e6961df7a4522dae8e7e658c47cfbab20eff7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-21967
creationtimestamp| type| source ---|---|--- 2025-03-03 15:40:30+00:00| seen| https://gist.github.com/juank704/8c144f4ae0004f19892c23b19deca658...
CVE-2025-27270
Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Privilege Escalation.This issue affects Residential Address Detection: from n/a through = 2.5.4...
CVE-2025-27270
CVE-2025-27270 : Missing Authorization in the WordPress plugin “Residential Address Detection” allows unauthenticated arbitrary options updates, enabling privilege escalation. Affected: Residential Address Detection plugin for WordPress (versions
CVE-2025-27270 WordPress Residential Address Detection Plugin <= 2.5.4 - Arbitrary Option Update to Privilege Escalation vulnerability
Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Privilege Escalation.This issue affects Residential Address Detection: from n/a through = 2.5.4...
CVE-2025-27268 WordPress Small Package Quotes – Worldwide Express Edition Plugin <= 5.2.18 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...