4128 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-38143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to...
Remote Code Execution (RCE)
ms-swift is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization because yaml.load from PyYAML is used in tests/run.py, allowing attackers to execute arbitrary code via a crafted YAML configuration file...
AZL-73545 CVE-2025-38515 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists between spscqueuepush and the run-job worker, in which spscqueuepush may return not-first while the run-job worker has already idled due to the jo...
CVE-2025-38515
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists between spscqueuepush and the run-job worker, in which spscqueuepush may return not-first while the run-job worker has already idled due to the jo...
UBUNTU-CVE-2025-38515
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists between spscqueuepush and the run-job worker, in which spscqueuepush may return not-first while the run-job worker has already idled due to the jo...
CVE-2025-38515
CVE-2025-38515 concerns a race in the Linux kernel’s DRM scheduler. The description states a small race between drm/sched spsc_queue_push and the run-job worker, where spsc_queue_push may return not-first while the worker has idled due to the job count reaching zero. The consequence is that job s...
CVE-2025-8013
CVE-2025-8013 affects the Quttera Web Malware Scanner WordPress plugin and is an authenticated SSRF vulnerability via RunExternalScan in all versions up to 3.5.1.41. Exploitation requires Administrator-level access or higher and enables the attacker to trigger web requests to arbitrary locations ...
CVE-2025-8013 Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests ...
Security Updates for Microsoft Visio Products C2R (August 2025)
The Microsoft Visio Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instea...
PT-2025-33447 · WordPress · Quttera Web Malware Scanner
Name of the Vulnerable Software and Affected Versions: Quttera Web Malware Scanner for WordPress versions up to and including 3.5.1.41 Description: The Quttera Web Malware Scanner plugin for WordPress is susceptible to Server-Side Request Forgery via the RunExternalScan function. Authenticated...
WordPress plugin Quttera Web Malware Scanner 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2024-23652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfi...
Malicious code in argo-run (npm)
The package argo-run was found to contain malicious code...
Malicious code in run-script-bootes-lithosphere-electron-builder (npm)
The package run-script-bootes-lithosphere-electron-builder was found to contain malicious code...
Malicious code in extremophile-venus-neptune-run-script (npm)
The package extremophile-venus-neptune-run-script was found to contain malicious code...
Malicious code in run-after (npm)
The package run-after was found to contain malicious code...
Malicious code in cycle-monorepo-sandbox-xstream-run (npm)
The package cycle-monorepo-sandbox-xstream-run was found to contain malicious code...
Malicious code in biotechnology-parsec-cosmiconfig-run-script (npm)
The package biotechnology-parsec-cosmiconfig-run-script was found to contain malicious code...