37344 matches found
The vulnerability of the gss_import_v2_context() function in the net/sunrpc/auth_gss/gss_krb5_mech.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the gssimportv2context function in the net/sunrpc/authgss/gsskrb5mech.c module of the Linux kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the eswInlineMode_to DevLink() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitchOffloads.c driver module of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the eswinlinemodetodevlink function in the drivers/net/ethernet/mellanox/mlx5/core/eswitchoffloads.c file of the Mellanox Ethernet adapter support driver for Linux operating systems is related to improper resource release. Exploiting this vulnerability could allow an attacker...
Fedora 41 : luksmeta (2025-78747a63cd)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-78747a63cd advisory. New upstream release v10 Fix: CVE-2025-11568 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
Fedora 42 : luksmeta (2025-457000540a)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-457000540a advisory. New upstream release v10 Fix: CVE-2025-11568 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
CVE-2025-13208 FantasticLBP Hotels Server hotelList.php sql injection
A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function of the file controller/api/hotelList.php. The manipulation of the argument subjectId/cityName results in sql injection. The attack can be...
[SECURITY] Fedora 42 Update: ruff-0.14.3-1.fc42
An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...
[SECURITY] Fedora 43 Update: opentofu-1.10.7-1.fc43
OpenTofu lets you declaratively manage your cloud infrastructure...
SUSE CVE-2025-40195
In the Linux kernel, the following vulnerability has been resolved: mount: handle NULL values in mntnsrelease When calling in listmount mntnsrelease may be passed a NULL pointer. Handle that case gracefully...
SUSE CVE-2025-40196
In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...
DouPHP 代码问题漏洞
DouPHP is an enterprise website builder from China DouPHP Company. A code issue vulnerability exists in DouPHP 1.8 Release 20251022 and earlier versions, which stems from the incorrect operation of the parameter File in the file upload/include/file.class.php, which can lead to unlimited uploads...
Fedora 41 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-00e5b3d89c)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-00e5b3d89c advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...
Photon OS 5.0: Linux PHSA-2025-5.0-0679
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0679. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EUVD-2022-55681
Vodafone H500s devices running firmware v3.5.10 hardware model Sercomm VFH500 expose the WiFi access point password via an unauthenticated HTTP endpoint. By sending a crafted GET request to /data/activation.json with specific headers and cookies, a remote attacker can retrieve a JSON document tha...
CVE-2025-22106 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-22106 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-61984 affecting package openssh for versions less than 9.8p1-5
CVE-2025-61984 affecting package openssh for versions less than 9.8p1-5. A patched version of the package is available...
CVE-2025-39849 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39849 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-39972 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39972 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-39967 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39967 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...