CVE-2024-53693: Improper Neutralization of CRLF Sequences

An improper neutralization of CRLF sequences 'CRLF Injection' vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application data. We have already fixed the...

TOTOLINK EX1800T 安全漏洞

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability, which stems from the incorrect operation of the function setWiFiExtenderConfig parameter apcliKey and key, and no detailed vulnerability details...

CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...

Linux Distros Unpatched Vulnerability : CVE-2024-49898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check null-initialized variables WHAT & HOW drrtiming and subvppipe are initialized to null and they are not always assigned new values. It is...

Linux Distros Unpatched Vulnerability : CVE-2024-56694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SKPASS When the streamverdict program...

Linux Distros Unpatched Vulnerability : CVE-2023-30589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling...

Linux Distros Unpatched Vulnerability : CVE-2022-34841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper buffer restrictions in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privileg...

Linux Distros Unpatched Vulnerability : CVE-2023-1855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in xgenehwmonremove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver xgene-hwmon. This flaw could...

Linux Distros Unpatched Vulnerability : CVE-2024-37021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: manager: add owner module and take its refcount The current implementation of the fpga manager assumes that the low-level module registers a driver for th...

Linux Distros Unpatched Vulnerability : CVE-2023-38703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages. SRTP is a higher lev...

Linux Distros Unpatched Vulnerability : CVE-2023-27043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is...

Linux Distros Unpatched Vulnerability : CVE-2021-3508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in getxreflinearskipped in pdf.c via a crafted PDF file. CVE-2021-3508 Note that...

Linux Distros Unpatched Vulnerability : CVE-2022-23319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation fault during PCF file parsing in pcf2bdf versions =1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This...

Linux Distros Unpatched Vulnerability : CVE-2023-46426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial ...

CVE-2025-0359

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework. Axis has released patched AXIS OS versions for the highlighted flaw. Please...

Linux Distros Unpatched Vulnerability : CVE-2017-15286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where sqlite3steppStmt==SQLITEROW is false...

Arista EOS 安全漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from improper handling of dynamic ACLs, which could affect access control...

SMB Windows Full Build Number

Gets the full build number of a Windows operating system using PowerShell via SMB. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

AXIS OS 代码问题漏洞

AXIS OS is an edge device operating system from Swedish company Axis AXIS. AXIS OS suffers from a security vulnerability that stems from insufficient input validation, which could lead to command injection and resource exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2017-15228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string. CVE-2017-15228 Note that...