Lucene search
K

16953 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/16 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-59378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the...

5.7CVSS5.9AI score0.00136EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:0 a.m.3 views

EulerOS Virtualization 2.13.1 : glibc (EulerOS-SA-2025-2160)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled...

7.8CVSS7AI score0.00392EPSS
Exploits1References2
Oracle linux
Oracle linux
added 2025/09/16 12:0 a.m.4 views

glibc bug fix update

2.34-168.0.1.23 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi Oracle history: June-30-2025 Cupertino Miranda - 2.34-168.0.1.20 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi June-9-2025 Cupertino Miranda - 2.34-168.0.1.19 - Forward-port Oracle...

5.9CVSS7AI score0.00151EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:0 a.m.3 views

EulerOS Virtualization 2.13.1 : gnupg2 (EulerOS-SA-2025-2162)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that...

4.7CVSS6AI score0.00166EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:0 a.m.3 views

EulerOS 2.0 SP13 : coreutils (EulerOS-SA-2025-2133)

According to the versions of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory...

4.4CVSS5.3AI score0.00209EPSS
Exploits0References2
OSV
OSV
added 2025/09/15 6:15 a.m.1 views

UBUNTU-CVE-2025-59378

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it even after the build has ended...

5.7CVSS5.8AI score0.00136EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/09/15 12:0 a.m.4 views

Amazon Linux 2023 : compat-libpthread-nonshared, glibc, glibc-all-langpacks (ALAS2023-2025-1179)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1179 advisory. The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an...

5.9CVSS6.6AI score0.00151EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/15 12:0 a.m.6 views

CVE-2025-59378

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it even after the build has ended...

5.7CVSS0.00136EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/15 12:0 a.m.2 views

CVE-2025-59378

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it even after the build has ended...

5.7CVSS6.6AI score0.00136EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/15 12:0 a.m.1 views

GNU Guix 安全漏洞

GNU Guix is an open source, cross-platform package manager from the GNU community in the United States. A security vulnerability exists in versions of GNU Guix prior to 1618ca7, which stems from the fact that the content-addressed-mirrors file can be written to create the setuid program,...

5.7CVSS6.5AI score0.00136EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/09/15 12:0 a.m.4 views

CVE-2025-59378

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it even after the build has ended...

5.7CVSS5.3AI score0.00136EPSS
Exploits0
OSV
OSV
added 2025/09/12 3:24 p.m.5 views

CLSA-2025-1757690669 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

9.8CVSS6.8AI score0.04731EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.5 views

EulerOS 2.0 SP12 : coreutils (EulerOS-SA-2025-2033)

According to the versions of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory...

4.4CVSS5.3AI score0.00209EPSS
Exploits0References2
Redos
Redos
added 2025/09/10 12:0 a.m.1 views

ROS-20250910-01

A vulnerability in the GNU screen terminal multiplexer's logfilereopen function is related to the execution of an operation before privilege reset. Exploitation of the vulnerability could allow an attacker to write data to an arbitrary file with root privileges. data to an arbitrary file with roo...

7.8CVSS7.4AI score0.00213EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/09/10 12:0 a.m.3 views

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2025-2095)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS4.3AI score0.00166EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

EulerOS 2.0 SP12 : gnupg2 (EulerOS-SA-2025-2037)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect...

4.7CVSS6AI score0.00166EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-43920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Mailman 2.1.39, as bundled in cPanel and WHM, in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands...

8.1CVSS6AI score0.00474EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2025/09/10 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-2000)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.2AI score0.00235EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2025/09/10 12:0 a.m.3 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-2031)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.2AI score0.00235EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2025/09/10 12:0 a.m.3 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-2090)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.2AI score0.00235EPSS
Exploits3References2
Rows per page
Query Builder