Linux Distros Unpatched Vulnerability : CVE-2018-19219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. CVE-2018-19219 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-20426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866. CVE-2018-20426 Note...

Linux Distros Unpatched Vulnerability : CVE-2018-19218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack. CVE-2018-19218 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-14326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MP4v2 2.0.0, there is an integer overflow with resultant memory corruption when resizing MP4Array for the ftyp atom in mp4array.h. CVE-2018-14326 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-20584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format. CVE-2018-20584 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2018-7339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2018-16982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have...

Linux Distros Unpatched Vulnerability : CVE-2018-10891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is...

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive).

...

Linux Distros Unpatched Vulnerability : CVE-2018-14335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their...

Linux Distros Unpatched Vulnerability : CVE-2018-20536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF spatialreference.cpp in libLAS 1.8.1 that will cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-17472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2018-16807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser. CVE-2018-16807...

Linux Distros Unpatched Vulnerability : CVE-2018-6315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The outputSWFTEXTRECORD function util/outputscript.c in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may...

Linux Distros Unpatched Vulnerability : CVE-2018-20539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a Segmentation fault triggered by illegal address access at liblas::SpatialReference::GetGTIF spatialreference.cpp in libLAS 1.8.1 that will cause a...

Linux Distros Unpatched Vulnerability : CVE-2018-1000816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running...

Linux Distros Unpatched Vulnerability : CVE-2018-7562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that...

Linux Distros Unpatched Vulnerability : CVE-2018-1043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames. CVE-2018-1043 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2018-1133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection...

Linux Distros Unpatched Vulnerability : CVE-2018-18625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana 5.3.1 has XSS via a link on the Dashboard All Panels General screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...