Linux Distros Unpatched Vulnerability : CVE-2014-2907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation...

Linux Distros Unpatched Vulnerability : CVE-2014-2532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshdconfig, which allows remote attackers to bypass intended environment...

Linux Distros Unpatched Vulnerability : CVE-2014-6410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The udfreadinode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximat...

Linux Distros Unpatched Vulnerability : CVE-2014-0075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before...

Linux Distros Unpatched Vulnerability : CVE-2014-7839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the 1 external-general-entities or 2 external-parameter-entities features, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2014-9849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The png coder in ImageMagick allows remote attackers to cause a denial of service crash. CVE-2014-9849 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2014-0477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2014-10070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment instead of treating them as literal numbers. That...

Linux Distros Unpatched Vulnerability : CVE-2014-5355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIT Kerberos 5 aka krb5 through 1.13.1 incorrectly expects that a krb5readmessage data field is represented as a string ending with a '\0' character, which allo...

Linux Distros Unpatched Vulnerability : CVE-2014-10071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the & fd syntax. CVE-2014-10071 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2014-9653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread...

Linux Distros Unpatched Vulnerability : CVE-2014-1346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a...

Linux Distros Unpatched Vulnerability : CVE-2014-9729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The udfreadinode function in fs/udf/inode.c in the Linux kernel before 3.18.2 does not ensure a certain data-structure size consistency, which allows local user...

Linux Distros Unpatched Vulnerability : CVE-2014-9663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, whic...

Linux Distros Unpatched Vulnerability : CVE-2014-9474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the mpfrstrtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to...

Linux Distros Unpatched Vulnerability : CVE-2014-7186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service out-of-bounds array access and...

Linux Distros Unpatched Vulnerability : CVE-2014-5270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it...

Linux Distros Unpatched Vulnerability : CVE-2014-4330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context- dependent attackers to cause a denial of service stack...

Linux Distros Unpatched Vulnerability : CVE-2014-3478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14,...

Linux Distros Unpatched Vulnerability : CVE-2014-1594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary...