583 matches found
CVE-2025-39694 s390/sclp: Fix SCCB present check
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address...
CVE-2025-52548
E3 Site Supervisor Control firmware version 2.31F01 contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the...
PT-2025-35223
Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 16.10.99.1754050155 Tuleap Enterprise Edition versions prior to 16.9-8 Tuleap Enterprise Edition versions prior to 16.10-5 Description: Tuleap is an Open Source Suite created to facilitate management...
Storing Passwords in a Recoverable Format
Overview org.xwiki.platform:xwiki-platform-export-pdf-api is an API for multipage PDF export that supports both client-side printing, using the user's web browser, and server-side printing, e.g. using a headless Chrome browser that may run inside a Docker container. Affected versions of this...
Fedora 41 : mod_auth_openidc (2025-be0c6f25ce)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-be0c6f25ce advisory. Rebase to new version resolves CVE-2025-31492 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
MINI-XF92-2Q3Q-28QP
Bulletin has no description...
IBM MQ REST API and Console Installed (Linux)
Binary data ibmmqwebrestapinixinstalled.nbin...
CGA-64M7-QJP3-HVHV
Bulletin has no description...
CGA-Q8MH-86HQ-8J7V
Bulletin has no description...
CGA-7R8G-63QW-P9CF
Bulletin has no description...
CVE-2010-20122
Xftp FTP Client version up to and including 3.0 build 0238 contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the...
CVE-2010-20122 Xftp FTP Client <= 3.0 PWD Response Buffer Overflow
Xftp FTP Client version up to and including 3.0 build 0238 contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the...
Linux Distros Unpatched Vulnerability : CVE-2023-34053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS...
GHSA-9X9C-GHC5-JHW9
creationtimestamp| type| source ---|---|--- 2025-08-15 15:34:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115033509822272775...
Linux Distros Unpatched Vulnerability : CVE-2024-46792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory rawcopyto,fromuser do not call...
Malicious code in @zalastax/nolb-axk (npm)
The package @zalastax/nolb-axk was found to contain malicious code...
MAL-2025-12262 Malicious code in @zalastax/nolb-lione (npm)
The package @zalastax/nolb-lione was found to contain malicious code...
MAL-2025-38847 Malicious code in watermelon-almond-gf7n (npm)
The package watermelon-almond-gf7n was found to contain malicious code...