Korenix JetNet Improper Authentication (CVE-2023-5376)

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

CVE-1999-0498

TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files...

EUVD-2005-0276

Malware in sbrugna...

EUVD-2011-0402

Malware in sbrugna...

EUVD-2004-0306

Malware in sbrugna...

EUVD-2007-5339

Malware in sbrugna...

EUVD-2007-6681

Malware in sbrugna...

EUVD-2004-0950

Malware in sbrugna...

EUVD-2013-6506

Malware in sbrugna...

EUVD-2001-1464

Malware in sbrugna...

EUVD-2001-0768

Malware in sbrugna...

EUVD-2025-16693

Malicious code in bioql PyPI...

EUVD-2022-48981

Malicious code in bioql PyPI...

CVE-2025-49162

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename...

CVE-2025-49162

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename...

CVE-2025-49162

CVE-2025-49162 affects Arris VIP1113 devices using KreaTV SDK. A remote TFTP operation can overwrite a local file when the remote filename contains a space, allowing control of the local filename. Documented impact per CVSS: high confidentiality, integrity, and availability with physical attack v...

CVE-2025-49162

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename...

CVE-2023-27078

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

CVE-2022-46143

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data...

SUSE-SU-2019:2373-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer bsc1149495. - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow bsc1149496...