Amazon Linux 2023 : mod_security, mod_security-mlogc (ALAS2023-2025-1139)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1139 advisory. ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If...

Linux Distros Unpatched Vulnerability : CVE-2022-46457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c. CVE-2022-46457 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-29580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasmexprcreate at /libyasm/expr.c. CVE-2023-29580 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-48426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash...

NVIDIA Triton Inference Server Denial of Service Vulnerability (CNVD-2025-20004)

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A denial of service vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to cause segmentation error...

PT-2025-33683 · Cip · Cip

Name of the Vulnerable Software and Affected Versions: Versions affected not specified Description: A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle,...

Medium: mod_security

Issue Overview: ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xm...

Linux Distros Unpatched Vulnerability : CVE-2021-45263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid free vulnerability exists in gpac 1.1.0 via the gfsvgdeleteattributevalue function, which causes a segmentation fault and application crash...

Linux Distros Unpatched Vulnerability : CVE-2019-9038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is an out-of- bounds read problem with a SEGV in the function ReadNextCell...

Linux Distros Unpatched Vulnerability : CVE-2020-27787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentaation fault was found in UPX in invertptdynamic function in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access tha...

Linux Distros Unpatched Vulnerability : CVE-2025-38486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soundwire: Revert soundwire: qcom: Add setchannelmap api support This reverts commit 7796c97df6b1b2206681a07f3c80f6023a6593d5. This patch broke Dragonboard 845c...

Linux Distros Unpatched Vulnerability : CVE-2025-38355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe: Process deferred GGTT node removals on device unwind While we are indirectly drainin...

Linux Distros Unpatched Vulnerability : CVE-2022-35485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969. CVE-2022-35485 Note that Nessus relies on the presence of...

CVE-2025-9042

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

CLSA-2025-1755270846 ncurses: Fix of CVE-2022-29458

CVE-2022-29458: fix out-of-bounds read and segmentation violation...

OESA-2025-2028 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg...

OESA-2025-2029 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg...

OESA-2025-2027 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg...

Linux Distros Unpatched Vulnerability : CVE-2022-49876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix general- protection-fault in ieee80211subifstartxmit When device is...

Firebird 代码问题漏洞

Firebird is an open source cross-platform relational database management system from the Firebird Foundation that provides multiple ANSI SQL-92 capabilities. A code issue vulnerability exists in Firebird versions prior to 4.0.6.3183, prior to 5.0.2.1610, and prior to 6.0.0.609, which stems from a...