29381 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-46969
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Fix invalid error returning in mhiqueue mhiqueue returns an error when the...
CVE-2012-10046 E-Mail Security Virtual Appliance learn-msg.cgi Command Injection
The E-Mail Security Virtual Appliance ESVA tested on version ESVA2057 contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands...
CVE-2012-10046
The CVE-2012-10046 entry concerns the E-Mail Security Virtual Appliance (ESVA), tested on ESVA_2057, which contains an unauthenticated command-injection in the learn-msg.cgi CGI handler. The vulnerability stems from inadequate sanitization of user input in the id parameter, allowing arbitrary she...
CVE-2012-10046 E-Mail Security Virtual Appliance learn-msg.cgi Command Injection
The E-Mail Security Virtual Appliance ESVA tested on version ESVA2057 contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands...
CVE-2025-48913 Apache CXF: Untrusted JMS configuration can lead to RCE
If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility. Users are recommended to upgrade to versions 3.6.8...
CVE-2025-27066
Transient DOS while processing an ANQP message...
Linux Distros Unpatched Vulnerability : CVE-2024-26881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is received on HIP08 devices The HIP08 devices does no...
PT-2025-32399 · Unknown · E-Mail Security Virtual Appliance
Name of the Vulnerable Software and Affected Versions: E-Mail Security Virtual Appliance ESVA version ESVA 2057 Description: The E-Mail Security Virtual Appliance ESVA contains an unauthenticated command injection issue in the learn-msg.cgi script. The CGI handler does not properly sanitize...
Linux Distros Unpatched Vulnerability : CVE-2022-47943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of- bounds read and OOPS for SMB2WRITE, when there is a...
ESVA-Project E-Mail Security Virtual Appliance 安全漏洞
ESVA-Project E-Mail Security Virtual Appliance is an email security virtual appliance from ESVA-Project. A security vulnerability exists in the E-Mail Security Virtual Appliance, version ESVA2057, which stems from a learn-msg.cgi script that is not cleaned of user input and could lead to command...
smb: client: add NULL check in automount_fullpath
...
smb: Log an error when close_all_cached_dirs fails
...
i2c: tegra: check msg length in SMBUS block read
...
Linux Distros Unpatched Vulnerability : CVE-2023-38431
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's...
PT-2025-32329
Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 3.6.8 Apache CXF versions prior to 4.0.9 Apache CXF versions prior to 4.1.3 Description If untrusted users are permitted to configure JMS Java Message Service for Apache CXF, they could use RMI Remote Method...
Linux Distros Unpatched Vulnerability : CVE-2025-38051
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: Fix use-after-free in cifsfilldirent There is a race condition in the readdir concurrency process, which may access the rsp buffer after it has bee...
CVE-2025-23324
creationtimestamp| type| source ---|---|--- 2025-08-06 13:55:23+00:00| seen| Telegram/DEzMG1bjFv8fzpLH54WKSxupz1jBq0RpoVZiBtH2aOXFs...
Buffer Access with Incorrect Length Value
Overview Affected versions of this package are vulnerable to Buffer Access with Incorrect Length Value via the MessageQueue class in the bundled Python backend. An attacker could cause an out-of-bounds write by sending a specially crafted request, leading to information disclosure, denial of...
