Linux Distros Unpatched Vulnerability : CVE-2011-3637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mstop function in fs/proc/taskmmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service OOPS via vectors that trigger an mstar...

Linux Distros Unpatched Vulnerability : CVE-2010-4173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1...

Linux Distros Unpatched Vulnerability : CVE-2011-4944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that...

Linux Distros Unpatched Vulnerability : CVE-2010-2811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization RHEV 2.2 does not properly accept TCP connections for SSL sessions, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2008-2142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Emacs 21 and XEmacs automatically load and execute .flc fast lock files that are associated with other files that are edited within Emacs, which allows...

Linux Distros Unpatched Vulnerability : CVE-2010-0308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service assertion failure via a...

Linux Distros Unpatched Vulnerability : CVE-2011-4718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...

Linux Distros Unpatched Vulnerability : CVE-2010-1194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring o...

Linux Distros Unpatched Vulnerability : CVE-2006-7246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used. CVE-2006-7246 Note that Nessus relies on the presence...

CVE-2025-1831

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The...

Malicious code in tfjs-backend-webgl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394beab3692bd8a9cc0902f84d10854738b137e336a125a3be59345d8e13f284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jaws-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef97004c02a81ddc0d6afb6b85005d92b395ba93911614fbabdd1ab2c1736de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in financial-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f4bf26e98d1be14ad1a5014b165a3fea5ad540b4f8b496837b595c90496024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2025-21769

Bulletin has no description...

BELL-CVE-2025-21747

Bulletin has no description...

BELL-CVE-2024-57992

Bulletin has no description...

BELL-CVE-2024-52557

Bulletin has no description...

SUSE CVE-2024-58011

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Check for adev == NULL Not all devices have an ACPI companion fwnode, so adev might be NULL. This can e.g. theoretically happen when a user manually binds one of the int3472 drivers to another i2c/platform...

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

Malicious code in fluentui-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946d5d0851f29bedadf8857d3b954ecf93da7aaa8b01cc198063141c739169d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...