4750 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-22179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature. CVE-2021-22179 Note...
Linux Distros Unpatched Vulnerability : CVE-2020-13756
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or...
Linux Distros Unpatched Vulnerability : CVE-2020-10188
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overfl...
Linux Distros Unpatched Vulnerability : CVE-2021-2111
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily...
Linux Distros Unpatched Vulnerability : CVE-2022-26496
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a...
Linux Distros Unpatched Vulnerability : CVE-2019-18849
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat...
PT-2025-34868
Name of the Vulnerable Software and Affected Versions: Dell ThinOS 10 versions prior to 2508 10.0127 Description: Dell ThinOS 10 is susceptible to an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' issue. A local unauthenticated user could potentially exploit this...
Linux Distros Unpatched Vulnerability : CVE-2021-2475
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.28. Easily...
Mozilla Firefox for iOS Cross-Site Scripting Vulnerability (CNVD-2025-19567)
Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A cross-site scripting vulnerability exists in Mozilla Firefox for iOS prior to version 142, which stems from an improper handling of the Content-Disposition header and can be exploited by an...
jsPDF 安全漏洞
jsPDF is Parallax open source a JavaScript-based PDF document generation library . A security vulnerability exists in versions prior to jsPDF 3.0.2, which stems from the addImage method not adequately validating input, which could lead to CPU resource exhaustion and denial of service attacks...
Unspecified Vulnerability in Mozilla Firefox for Android (CNVD-2025-19561)
Mozilla Firefox for Android is a web browser designed for Android devices by the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox for Android prior to version 141, which stems from a blob:URI that may hide the true origin of a page and can be exploited by an attacke...
SelectZero Data Observability Platform 安全漏洞
SelectZero Data Observability Platform is a data processing platform from SelectZero Estonia. A security vulnerability exists in SelectZero Data Observability Platform versions prior to 2025.5.2, which stems from mishandling of UI fields in older versions and could lead to HTML injection...
TeamViewer Full Client和TeamViewer Host 安全漏洞
TeamViewer Full Client and TeamViewer Host are both a remote control software from the German company TeamViewer. A security vulnerability exists in TeamViewer Full Client and TeamViewer Host versions prior to 15.69, which stems from a contention condition in the directory validation logic that...
Linux Distros Unpatched Vulnerability : CVE-2020-9355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled. CVE-2020-9355 Note that Nessus relies on the...
CVE-2025-52218
The CVE-2025-52218 issue affects SelectZero Data Observability Platform versions prior to 2025.5.2. It stems from improper sanitization of unspecified parameters, enabling Content Spoofing / Text Injection that can affect the login page. A PT-2025-34773 entry confirms the affected line of attack ...
Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2025-19563)
Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for iOS prior to version 141, which can be exploited by attackers to open arbitrary website URLs or internal pages...
Mozilla Focus for iOS cross-site scripting vulnerability (CNVD-2025-19558)
Mozilla Focus for iOS is a privacy browser from the US-based Mozilla Foundation designed for iOS devices. A cross-site scripting vulnerability exists in Mozilla Focus for iOS prior to version 142, which stems from an improper handling of the Content-Disposition header, and can be exploited by an...
Linux Distros Unpatched Vulnerability : CVE-2018-3291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easi...
Linux Distros Unpatched Vulnerability : CVE-2018-7749
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customiz...
Linux Distros Unpatched Vulnerability : CVE-2018-20743
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to...