6956 matches found
CVE-2024-10603
Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances...
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20250128T150132 2025-01-28T15:01:32Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3409 CVE-2025-23208 GHSA-c9p4-xwr9-rfhx GO-2025-3410 CVE-2025-24337 GHSA-3qc3-mx6x-267...
Oracle Linux 8 : bzip2 (ELSA-2025-0733)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0733 advisory. 1.0.6-28 - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140 Tenable has...
bzip2 security update
1.0.6-28 - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140...
Fedora: Security Advisory (FEDORA-2025-e8b9a6b564)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-56722 affecting package kernel for versions less than 6.6.64.2-1
CVE-2024-56722 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-50240 affecting package kernel for versions less than 6.6.64.2-1
CVE-2024-50240 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-53082 affecting package kernel for versions less than 6.6.64.2-1
CVE-2024-53082 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-50209 affecting package kernel for versions less than 6.6.64.2-1
CVE-2024-50209 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...
Debian: Security Advisory (DSA-5851-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-24356
fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...
CVE-2024-54145
Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the getdiscoveryresults function of automationdevices.php using the network parameter. This vulnerability is fixed in 1.2.29...
CVE-2024-55228
A cross-site scripting XSS vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...
Advisory ROSA-SA-2025-2570
software: php 7.4.33 WASP: ROSA-CHROME packageevrstring: php-7.4.33-11 CVE-ID: CVE-2022-4900 BDU-ID: 2023-02666 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the phpcliserverstartupworkers sapi/cli/phpcliserver.c function of the PHP programming language interpreter is related to an operation...
Important: Red Hat Bug Fix Advisory: LVMS 4.17.4 Bug Fix Update
Updated container images that fix multiple bugs are now available for LVMS 4.17 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...
CVE-2024-57184
An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tsprocesspmt in mediatools/mpegts.c:2163 that can cause a denial of service DOS via a crafted MP4 file...
CVE-2024-57947
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map search step, the result a...
Kibana 7.17.23/8.15.0 Security Updates (ESA-2024-32, ESA-2024-33)
Kibana allocation of resources without limits or throttling leads to crash ESA-2024-33 An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/metrics/snapshot. This can be carried out by users with read access to the...
CVE-2025-20128
A vulnerability in the Object Linking and Embedding 2 OLE2 decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer underflow in a bounds check that allows for a heap buff...
