8067 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-5634
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to RBR. CVE-2016-5634 Note...
Linux Distros Unpatched Vulnerability : CVE-2016-3495
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB...
Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware
The threat actor known as Silver Fox has been attributed to abuse of a previously unknown vulnerable driver associated with WatchDog Anti-malware as part of a Bring Your Own Vulnerable Driver BYOVD attack aimed at disarming security solutions installed on compromised hosts. The vulnerable driver ...
Linux Distros Unpatched Vulnerability : CVE-2024-23722
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crash...
Amazon Disrupts Russian APT29 Watering Hole Targeting Microsoft Authentication
Amazon has disrupted a Russian APT29 watering hole campaign that used compromised sites to target Microsoft authentication with…...
The vulnerability of the rxe_create_cq function in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the rxecreatecq function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the mlx5e_fix_uplink_rep_features function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mlx5efixuplinkrepfeatures function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the cdns3 component in the Linux operating system, which allows a hacker to trigger a service failure.
The vulnerability of the cdns3 component in the Linux operating system’s kernel is related to a freeze that occurs due to repeated resource blocking. Exploiting this vulnerability can allow an attacker who operates remotely to cause service interruptions...
CVE-2025-51667
An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...
Linux Distros Unpatched Vulnerability : CVE-2018-8956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP...
Linux Distros Unpatched Vulnerability : CVE-2023-22332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 4.4 series, 4.3.0 to 4.3.4 4.3 series, 4.2.0 to 4.2.11 4.2 series, 4.1.0 to 4.1.14 4.1...
CVE-2025-29899
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...
PT-2025-35193
Name of the Vulnerable Software and Affected Versions: Synology RADIUS Server versions prior to 3.0.27-0139 Description: The application contains a cross-site scripting XSS issue. Remote authenticated users with administrator privileges can read or write limited files in SRM and conduct limited...
CVE-2025-9195
CVE-2025-9195 affects Solidigm DC Products firmware. The vulnerability is due to improper input validation in the firmware, which could allow a local attacker (requires high privileges) to trigger a Denial of Service (A: high). The CVSS from the entry is CVSS3.1: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A...
CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection
A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...
GHSA-F2M2-4Q6R-CWC4 simple-admin-core SQL Injection vulnerability
An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...
simple-admin-core SQL Injection vulnerability
An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...
CVE-2025-51667
An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...
CVE-2025-51667
An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...