Linksys E5600 Router <= 1.1.0.26 Multiple Command Injection Vulnerabilities

Linksys E5600 routers are prone to multiple command injection vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Pydio Core End of Life (EOL) Detection

The Pydio Core version on the remote host has reached the end of life EOL and should not be used anymore. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7-Zip Multiple Vulnerabilities (Apr 2025) - Windows

7zip is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:7-zip:7-zip"; ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-31344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow vulnerability in openEuler giflib on Linux. This vulnerability is associated with program files gif2rgb.C. This issue affects giflib:...

Linux Distros Unpatched Vulnerability : CVE-2025-31672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are...

Linux Distros Unpatched Vulnerability : CVE-2025-26682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2025-26682 Note that...

MariaDB DoS Vulnerability (MDEV-32084)

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

MariaDB DoS Vulnerability (MDEV-32086)

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

Linux Distros Unpatched Vulnerability : CVE-2025-27796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation. CVE-2025-27796 Note that Nessus relies on the presence of the package as reported by t...

Linux Distros Unpatched Vulnerability : CVE-2025-1713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involvin...

Linux Distros Unpatched Vulnerability : CVE-2023-45919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString. NOTE: this is disputed because there are no common situations in which users...

Linux Distros Unpatched Vulnerability : CVE-2024-48943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - A malicious RPKI rsync repository can prevent Fort from finishing its validation run by drip-feeding its content. CVE-2024-48943 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2025-0998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM...

Linux Distros Unpatched Vulnerability : CVE-2024-50612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read. CVE-2024-50612 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2025-0927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - linux - None Ubuntu Linux - fs: hfs/hfsplus: add keylen boundary check to hfsbnodereadkey CVE-2025-0927 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2025-25207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - RHCL: AuthPolicy Callbacks Result in Denial of Service in Authorino Severity CVE-2025-25207 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2025-25208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - RHCL: Authorino Denial of Service Through AuthPolicy With sharedSecretRef Severity CVE-2025-25208 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-7455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as...

Linux Distros Unpatched Vulnerability : CVE-2025-25209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - RHCL: sharedSecretRef Can Be Used To Leak Secrets Severity CVE-2025-25209 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2025-1018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential...