29270 matches found
kernel: crypto: algif_hash - fix double free in hash_accept
In the Linux kernel, the following vulnerability has been resolved: crypto: algifhash - fix double free in hashaccept If accept2 is called on socket type algifhash with MSGMORE flag set and cryptoahashimport fails, sk2 is freed. However, it is also freed in afalgrelease, leading to...
glib2: Signal subscription vulnerabilities
A flaw was found in GNOME GLib. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the...
glib: buffer overflow in set_connect_msg()
A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...
glib: buffer overflow in set_connect_msg()
A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...
glib: buffer overflow in set_connect_msg()
A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...
Linux Distros Unpatched Vulnerability : CVE-2019-9003
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmimsghandler.c use-after- free and OOPS by arranging for certain simultaneous...
Linux Distros Unpatched Vulnerability : CVE-2025-38588
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop in rt6nlmsgsize While testing prior patch, I was able to trigge...
RHSA-2025:3358
creationtimestamp| type| source ---|---|--- 2025-08-30 23:21:42+00:00| seen| Telegram/pzQZL89ToXmN8Lo0SWfDuqV5gWT9hVbPzXwBvls0LDHgKQ...
CVE-2025-9473
A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...
RHSA-2023:5095
creationtimestamp| type| source ---|---|--- 2025-08-30 12:19:50+00:00| seen| Telegram/80A1eyoWoPGSiDEp1L8hDgFCJP41VDr32O2TwZCuIF-1jM...
RHSA-2024:3527
creationtimestamp| type| source ---|---|--- 2025-08-30 10:23:06+00:00| seen| Telegram/y04OMmpXkIonJuNQPKrf7N0zQs6VD7fXMh7ZvBcfO766kXE...
RHSA-2024:2106
creationtimestamp| type| source ---|---|--- 2025-08-30 10:23:06+00:00| seen| Telegram/y04OMmpXkIonJuNQPKrf7N0zQs6VD7fXMh7ZvBcfO766kXE...
RHSA-2024:4028
creationtimestamp| type| source ---|---|--- 2025-08-30 10:23:06+00:00| seen| Telegram/y04OMmpXkIonJuNQPKrf7N0zQs6VD7fXMh7ZvBcfO766kXE...
Linux Distros Unpatched Vulnerability : CVE-2019-11221
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC 0.7.1 has a buffer overflow issue in gfimportmessage in mediaimport.c. CVE-2019-11221 Note that Nessus relies on the presence of the package as reported by...
Linux Distros Unpatched Vulnerability : CVE-2019-7335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Lo...
Linux Distros Unpatched Vulnerability : CVE-2019-12446
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message. CVE-2019-12446 No...
UBUNTU-CVE-2025-58066
nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP...
CVE-2025-58066
nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP...
CVE-2025-58066
CVE-2025-58066 affects ntpd-rs versions 1.2.0–1.6.1 (server side with non‑NTS traffic). An attacker can induce a message storm between two NTP servers running ntpd-rs, enabling a denial of service. Client‑only configurations are not affected. The advisory recommends upgrading to version 1.6.2, wh...