Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986686 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings In qlcnic83xxaddrings,...

Russound MBX-PRE-D67F 安全漏洞

Russound MBX-PRE-D67F is an audio streaming pre-amplifier from Russound USA. A security vulnerability exists in the Russound MBX-PRE-D67F version 3.1.6, which originates from OS command injection and could lead to the execution of arbitrary commands with root privileges...

CVE-2025-50475: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralizati...

CVE-2025-50475

An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralizati...

UBUNTU-CVE-2021-47596

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...

SUSE CVE-2021-47542

In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings In qlcnic83xxaddrings, the indirect function of ahw-hwops-allocmbxargs will be called to allocate memory for cmd.req.arg, and there is a dereference of it ...

DEBIAN-CVE-2021-47542

In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings In qlcnic83xxaddrings, the indirect function of ahw-hwops-allocmbxargs will be called to allocate memory for cmd.req.arg, and there is a dereference of it ...

PT-2021-27209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.10 Description A use-after-free bug was discovered in the hclgevf send mbx msg function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-27165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description A use-after-free bug was discovered in the hclgevf send mbx msg function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-21665

Name of the Vulnerable Software and Affected Versions NCH IVM Attendant versions 5.12 and earlier Description Cross Site Scripting XSS exists via the "/msglist?mbx=" endpoint, which is reflected. This issue may allow attackers to inject malicious scripts into the affected system. Recommendations...

CVE-2021-37451: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= reflected...

PT-2013-1291

Name of the Vulnerable Software and Affected Versions dbc wnt.exe affected versions not specified Description The issue concerns a vulnerable function in the dbc wnt.exe module, located at address 0x4017d4, which reads the value of the NET MBX environment variable into a stack buffer without...

Fedora 14 : exim-4.72-2.fc14 (2010-12375)

This update fixes the following security flaws : - CVE-2010-2023 exim: hard-link following vulnerability in mailbox handling - CVE-2010-2024 exim: race condition when MBX locking is enabled Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Ubuntu Update for exim4 vulnerabilities USN-1060-1

Ubuntu Update for Linux kernel vulnerabilities USN-1060-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10601.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for exim4 vulnerabilities USN-1060-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Multiple vulnerabilities in Exim

================================== Exim Mailer, multiple vulnerabilites June 3, 2010 CVE-2010-2023, CVE-2010-2024 ================================== ==Description== Two vulnerabilities have been discovered in Exim 4, a popular mail transfer agent used on Unix-like systems www.exim.org. 1. When Ex...

CVE-2010-2024

transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/...

CVE-2010-2024

CVE-2010-2024 affects the Exim MTA: transports/appendfile.c vulnerable when MBX locking is enabled, allowing local users to change/create arbitrary files and potentially cause DoS or privilege gain via a symlink attack on a /tmp/.lockfile. Mitigation: upgrade to Exim 4.72 or newer (references ind...

Exim < 4.72 Multiple Vulnerabilities

The remote host is running Exim, a message transfer agent SMTP. According to the version number in its banner, the installed version of Exim is earlier than 4.72 and thus potentially affected by one or both of the following vulnerabilities : - An error when handling hardlinks within the mail...

Exim < 4.72 Multiple Vulnerabilities

Binary data 5557.prm...

CVE-2001-1285: Undefined Security Weakness

Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. dot dot in the mbx parameter...