CVE-2024-56184

In static long devsend of tipcdevql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-X3GM-94WQ-G975 PyTorch: Manipulation of the argument scale/zero_point leads to improper initialization via Quantized Sigmoid Module

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zeropoint leads to improper initialization. The attack needs to be approached...

Medium: binutils

Issue Overview: https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function. CVE-2024-57360 A vulnerability, which was classified as problematic, was found in GNU Binutils up t...

Linux Distros Unpatched Vulnerability : CVE-2024-26609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-26609 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2021-3236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service DoS via the exbufferall method. CVE-2021-3236 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2021-3714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via a local exploitation...

Linux Distros Unpatched Vulnerability : CVE-2022-4968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected. CVE-2022-4968 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2015-7543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the tempora...

Linux Distros Unpatched Vulnerability : CVE-2020-16156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Note that Nessus relies on the presence of the package as reported by the vendor. C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2015-9541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to...

Updated binutils packages fix security vulnerabilities

nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function. CVE-2024-57360 GNU Binutils objdump.c disassemblebytes stack-based overflow. CVE-2025-0840...

MGASA-2025-0084 Updated binutils packages fix security vulnerabilities

nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function. CVE-2024-57360 GNU Binutils objdump.c disassemblebytes stack-based overflow. CVE-2025-0840...

CVE-2024-51539

The Dell Secure Connect Gateway SCG Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attack...

CVE-2024-51539

The Dell Secure Connect Gateway SCG Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attack...

CVE-2024-51539

Dell Secure Connect Gateway (SCG) Application and Appliance versions prior to 5.28 are affected by an SQL injection due to improper neutralization of SQL elements. The vulnerability is exploitable locally by a high-privilege attacker, potentially leading to disclosure of non-sensitive information...

DEBIAN-CVE-2025-1632

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the publi...

SUSE CVE-2025-1372

A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dumpdatasection/printstringsection of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to b...

DEBIAN-CVE-2025-1376

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The...

MicroWorld eScan Antivirus 命令注入漏洞

MicroWorld eScan Antivirus is an antivirus software from MicroWorld. A command injection vulnerability exists in MicroWorld eScan Antivirus version 7.0.32. An attacker can exploit this vulnerability to perform operating system command injection locally...

PT-2025-6906

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192 Description: A problem has been found in GNU elfutils that affects the gelf getsymshndx function of the file strip.c in the eu-strip component. This issue leads to denial of service and must be approached locally. T...