Linux Distros Unpatched Vulnerability : CVE-2020-10673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceR...

Linux Distros Unpatched Vulnerability : CVE-2024-48910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability i...

SUSE-SU-2025:02859-1 Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059195 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351....

GHSA-X5GV-JW7F-J6XJ Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

Due to an overly broad allowlist of safe commands, it was possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation. Reliably exploiting this requires the ability to add untrusted content into a Claude Code contex...

SUSE-SU-2025:02858-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-1507005 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351. -...

Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122237 fixes several issues. The following security issues were fixed: CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351...

SUSE-SU-2025:02850-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52927: netfilter: allow exp not to be removed in...

CVE-2025-5296

creationtimestamp| type| source ---|---|--- 2025-08-18 12:12:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwoeo4sdfe2l 2025-09-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-03 2025-09-23 20:03:11+00:00| seen|...

CVE-2025-55205

creationtimestamp| type| source ---|---|--- 2025-08-18 07:40:27+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-fcpm-6mxq-m5vv 2025-08-18 18:23:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwozeocef227 2025-08-19...

Linux Distros Unpatched Vulnerability : CVE-2018-12035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yrexecutecode in libyara/exec.c...

Linux Distros Unpatched Vulnerability : CVE-2022-37603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable...

Linux Distros Unpatched Vulnerability : CVE-2021-33460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in ifcondition in modules/preprocs/nasm/nasm-pp.c. CVE-2021-33460 Note that...

Linux Distros Unpatched Vulnerability : CVE-2025-30193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can...

Linux Distros Unpatched Vulnerability : CVE-2018-19653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verifyoutgoing setting is improperly documented. NOTE: the...

Linux Distros Unpatched Vulnerability : CVE-2022-35485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969. CVE-2022-35485 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2025-31177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gnuplot is affected by a heap buffer overflow at function utf8copyone. CVE-2025-31177 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2023-31979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c. CVE-2023-31979 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-1052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap Buffer Overflow in iteratechainedfixups in GitHub repository radareorg/radare2 prior to 5.6.6. CVE-2022-1052 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2018-11652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...

Linux Distros Unpatched Vulnerability : CVE-2022-30321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and...