Linux Distros Unpatched Vulnerability : CVE-2014-1346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a...

Linux Distros Unpatched Vulnerability : CVE-2017-13052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint. CVE-2017-13052 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2014-3647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a...

Linux Distros Unpatched Vulnerability : CVE-2018-14358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack- based buffer overflow for a FETCH response with a long...

Linux Distros Unpatched Vulnerability : CVE-2014-8600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remot...

Linux Distros Unpatched Vulnerability : CVE-2016-0775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service crash via...

Linux Distros Unpatched Vulnerability : CVE-2017-8834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The crtknzrparsecomment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service memory allocation error via a crafted CSS...

Linux Distros Unpatched Vulnerability : CVE-2020-11947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...

Linux Distros Unpatched Vulnerability : CVE-2018-5268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted...

PT-2025-9586

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description An information disclosure issue in the /rest/cb/executeBasicSearch component allows attackers to access sensitive user information...

Linux Distros Unpatched Vulnerability : CVE-2009-0316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan...

PT-2025-7808 · Unknown · Benner Connecta

Name of the Vulnerable Software and Affected Versions: Benner Connecta version 1.0.5330 Description: A critical issue was discovered in the software, affecting an unknown functionality related to the file /Usuarios/Usuario/EditarLogado/. The manipulation of the Handle argument leads to improper...

PT-2025-7508 · Baiyi · Baiyi Cloud Asset Management System

Name of the Vulnerable Software and Affected Versions: Baiyi Cloud Asset Management System versions up to 20250204 Description: A critical issue has been found in the Baiyi Cloud Asset Management System, affecting some unknown processing of the file /wuser/admin.house.collect.php. The manipulatio...

PT-2025-7541

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for this issue Description A memory corruption issue exists due to incorrect handling of control transfer buffer sizes in the usb: cdc-acm module. When the first fragment is...

SUSE CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

PT-2025-6379 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLink X6000R version V9.4.0cu.652 B20230116 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification when adding Wi-Fi filtering rules. This can cause the remote target device to crash or...

PT-2025-6380 · H3C · H3C Fa3010L

Name of the Vulnerable Software and Affected Versions: H3C FA3010L access points version SWFA1B0V100R005 Description: A buffer overflow issue exists due to the lack of length verification, related to the setting of firewall rules. This can cause a remote target device to crash or execute arbitrar...

DEBIAN-CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

UBUNTU-CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

CVE-2025-24031 PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...