CVE-2025-1938

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 13...

CVE-2025-1938

CVE-2025-1938 affects Mozilla Firefox and Thunderbird on multiple release lines. The connected documents describe memory safety bugs in Firefox 135/Thunderbird 135 (and ESR 128.7), with some bugs showing memory corruption and the potential to exploit for arbitrary code execution if enough effort ...

CVE-2025-1307 Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload

The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunchinstallandactivateplugin function in all versions up to, and including, 1.8.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above...

Linux Distros Unpatched Vulnerability : CVE-2018-1000156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in...

Linux Distros Unpatched Vulnerability : CVE-2020-1930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration .cf files can be configured to run...

Linux Distros Unpatched Vulnerability : CVE-2019-8523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for...

Linux Distros Unpatched Vulnerability : CVE-2014-0007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path...

Linux Distros Unpatched Vulnerability : CVE-2017-12194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this...

Linux Distros Unpatched Vulnerability : CVE-2014-0145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service crash or possibly execute arbitrary code via...

Linux Distros Unpatched Vulnerability : CVE-2014-9114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. CVE-2014-9114 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2015-9262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte he...

Linux Distros Unpatched Vulnerability : CVE-2017-16544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the addmatch function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a director...

Linux Distros Unpatched Vulnerability : CVE-2018-1000116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution. CVE-2018-1000116 Note that...

Linux Distros Unpatched Vulnerability : CVE-2021-26825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in...

Linux Distros Unpatched Vulnerability : CVE-2017-15095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code...

Linux Distros Unpatched Vulnerability : CVE-2020-1752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an...

Linux Distros Unpatched Vulnerability : CVE-2017-2999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting...

Linux Distros Unpatched Vulnerability : CVE-2019-8707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows...

PT-2025-9663 · Mozilla +10 · Thunderbird +13

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 136 Firefox ESR versions prior to 128.8 Thunderbird versions prior to 136 Thunderbird ESR versions prior to 128.8 Description: The issue is related to memory safety bugs that could potentially lead to memory...

Linux Distros Unpatched Vulnerability : CVE-2019-17570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC aka ws-xmlrpc library. A maliciou...