9777 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-46838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of ze...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : OpenJDK 17 vulnerabilities (USN-7690-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7690-1 advisory. It was discovered that the 2D component of OpenJDK 17 did not properly manage memory under certain...
PT-2025-33355 · Unknown · Freemodbus
Name of the Vulnerable Software and Affected Versions: freemodbus version 2018-09-12 Description: An issue was discovered in the demo/LINUXTCP implementation of freemodbus, allowing attackers to reach an infinite loop via a crafted length value for a packet. Recommendations: At the moment, there ...
CVE-2025-51986
An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet...
The vulnerability of the lan743x_ptp_io_event_clock_get() function in the Linux kernel component allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the lan743xptpioeventclockget function in the Linux kernel’s networking component involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
CVE-2025-53137 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Oracle Linux 8 : kernel (ELSA-2025-13589)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-13589 advisory. - ipv6: mcast: extend RCU protection in igmp6send Hangbin Liu RHEL-102392 CVE-2025-21759 - net/sched: Always pass notifications when child class becom...
USN-7690-1 openjdk-17 vulnerabilities
It was discovered that the 2D component of OpenJDK 17 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 VMashroor Hasan Bhuiyan discovered that the JSSE...
USN-7690-1: OpenJDK 17 vulnerabilities
It was discovered that the 2D component of OpenJDK 17 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 VMashroor Hasan Bhuiyan discovered that the JSSE...
CVE-2025-8866
An authentication flaw has been discovered in YugabyteDB. Access is not properly enforced for the /metamaster/universe API endpoint. An unauthenticated attacker could exploit this flaw to obtain server networking configuration details, including private and public IP addresses and DNS records...
[SECURITY] Fedora 42 Update: toolbox-0.2-1.fc42
Toolbx is a tool for Linux, which allows the use of interactive command line environments for software development and troubleshooting the host operating system, without having to install software on the host. It is built on top of Podman and other standard container technologies from OCI. Toolbx...
CVE-2025-8866
YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. An unauthenticated attacker could exploit this flaw to obtain server networking configuration details, including private and public IP addresses and DNS records...
CVE-2025-8866
Summary: CVE-2025-8866 affects the YugabyteDB Anywhere web server, where the /metamaster/universe API endpoint does not properly enforce authentication. What’s affected: YugabyteDB Anywhere web server (specific versions not enumerated in provided documents). Root cause (as described): Authenticat...
CVE-2025-8866
YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. An unauthenticated attacker could exploit this flaw to obtain server networking configuration details, including private and public IP addresses and DNS records...
PT-2025-32557 · Yugabyte · Yugabytedb Anywhere
Name of the Vulnerable Software and Affected Versions: YugabyteDB Anywhere affected versions not specified Description: The YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. An unauthenticated attacker could exploit this flaw to...
Linux Distros Unpatched Vulnerability : CVE-2022-49865
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network When copying a struct ifaddrlblmsg to the network, ifalreserved remained uninitialized...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: nri-mysql, opensearch-k8s-operator, overmind, eksctl, sigstore-scaffolding, spark-operator-fips, cilium-certgen, kubernetes-dashboard-metrics-scraper, timescaledb-parallel-copy, cert-manager-cmctl-fips, node-feature-discovery-fips, prometheus-mysqld-exporter,...
Important: kernel6.12
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfscreatependingblockgroups CVE-2025-22115 In the Linux kernel, the following vulnerability has been resolved: ublk: fix race between iouringcmdcompleteintask and...
CLSA-2025-1754553172 kernel: Fix of 17 CVEs
net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - jbd2: fix assertion 'jh-bfrozendata == NULL' failure when journal aborted CVE-2022-50126 - kernfs: fix potential NULL dereference in kernfsremove CVE-2022-50148 - md-raid10: fix KASAN warning CVE-2022-50211 - xhci: Fix...
