EUVD-2006-1932

Malware in sbrugna...

EUVD-2014-8913

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414331 advisory. In rndisqueryoid in drivers/net/wireless/rndiswlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. Tenable has extracted the...

EUVD-2022-29609

Malicious code in bioql PyPI...

EUVD-2024-3257

Malicious code in bioql PyPI...

Squid Buffer Overflow Vulnerability (Sep 2025)

Squid is prone to a buffer overflow vulnerability as it mishandles ASN.1 encoding of long SNMP OIDs. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

...

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

Linux Distros Unpatched Vulnerability : CVE-2020-17487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in rx509parsealgorithmidentifier in libr/util/x509.c. This is due to a...

AZL-65088 CVE-2025-32989 affecting package gnutls for versions less than 3.7.11-4

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

CVE-2025-6437

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the ‘oid’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

CVE-2024-51497

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Custom OID" tab of a device allows authenticated users to inject arbitrary JavaScript through the "unit" parameter when creating a new OID. This vulnerability can le...

CVE-2017-1000417

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs e.g. in ExtKeyUsage extension on X.509 certificates...

CVE-2008-0846

SQL injection vulnerability in index.php in the comprofile component for Joomla! allows remote attackers to execute arbitrary SQL commands via the oid parameter...

CLSA-2025-1745053614 net-snmp: Fix of 2 CVEs

CVE-2022-24805: fix buffer overflow issue in handling of the INDEX of NET-SNMP-VACM- MIB that allows out-of-bounds memory access by user with read-only credentials - CVE-2022-24810: fix NULL pointer dereference caused by a user with read-write credentials using a malformed OID in a SET to the...

oid-base.com Cross Site Scripting vulnerability OBB-4042246

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

oid-base.com Cross Site Scripting vulnerability OBB-4041483

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Linux Distros Unpatched Vulnerability : CVE-2022-24808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malform...

Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution

A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attacker to achieve remote code execution on susceptible instances. The flaw, tracked as CVE-2025-22604, carries a CVSS score of 9.1 out of a...