Linux Distros Unpatched Vulnerability : CVE-2020-24613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAITCERTCR state, within SanityCheckTls13MsgReceived in tls13.c. This is an incorrect implementation ...

Linux Distros Unpatched Vulnerability : CVE-2018-14452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the always assign the sample of the first dimension region of this region feature of...

Linux Distros Unpatched Vulnerability : CVE-2019-13274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter. CVE-2019-13274 Note that Nessu...

CVE-2025-54742 WordPress WpEvently Plugin <= 4.4.8 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently allows Object Injection. This issue affects WpEvently: from n/a through 4.4.8...

GHSA-RFH2-8VXQ-JQR8 NodeBB SQL Injection vulnerability

NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint /api/v3/search/categories. The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads...

Linux Distros Unpatched Vulnerability : CVE-2019-11873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a craft...

Linux Distros Unpatched Vulnerability : CVE-2022-43295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795. CVE-2022-43295 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2020-27671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service data corruption, cause a data leak, or possib...

Linux Distros Unpatched Vulnerability : CVE-2019-13452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c. CVE-2019-13452 Note that Nessus relies on the presence of the package as reporte...

DEBIAN-CVE-2025-57804

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without...

CVE-2025-57804 h2 allows HTTP Request Smuggling due to illegal characters in headers

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without...

CVE-2025-56212

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter...

PT-2025-34681 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: PerfreeBlog version 4.0.11 contains a directory traversal flaw within the getThemeFilesByName function. Recommendations: At the moment, there is no information about a newer version that contains a fix...

CVE-2025-56214

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter...

Linux Distros Unpatched Vulnerability : CVE-2017-5206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism v...

Linux Distros Unpatched Vulnerability : CVE-2017-5361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time comparison algorithm for secrets, which makes it...

Linux Distros Unpatched Vulnerability : CVE-2018-10244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data becau...

Linux Distros Unpatched Vulnerability : CVE-2017-12954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service invalid memory read and...

Linux Distros Unpatched Vulnerability : CVE-2016-6831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The process-execute and process-spawn procedures did not free memory correctly when the execve call failed, resulting in a memory leak. This could be abused by ...

CraftCMS 安全漏洞

CraftCMS is a content management system from CraftCMS, Inc. A security vulnerability exists in CraftCMS versions 4.0.0-RC1 through 4.16.5 and 5.0.0-RC1 through 5.8.6, which stems from a Twig SSTI that could lead to remote code execution...