Linux Distros Unpatched Vulnerability : CVE-2018-4188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTun...

Linux Distros Unpatched Vulnerability : CVE-2018-14531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1-624. There is an unspecified heap-buffer-overflow crash in the AP4HvccAtom class in Core/Ap4HvccAtom.cpp. CVE-2018-14531...

Linux Distros Unpatched Vulnerability : CVE-2018-11419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp\u0 payload, related to...

Linux Distros Unpatched Vulnerability : CVE-2018-8807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a...

Linux Distros Unpatched Vulnerability : CVE-2018-14584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in Bento4 1.5.1-624. AP4AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap- based buffer over-read. CVE-2018-14584 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2018-1000556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can...

Linux Distros Unpatched Vulnerability : CVE-2018-18926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the...

Linux Distros Unpatched Vulnerability : CVE-2018-25024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memor...

Linux Distros Unpatched Vulnerability : CVE-2018-12108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE a...

Linux Distros Unpatched Vulnerability : CVE-2018-10057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2018-13447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut...

Linux Distros Unpatched Vulnerability : CVE-2018-16469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The merge.recursive function in the merge package 1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be...

Linux Distros Unpatched Vulnerability : CVE-2018-13448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid...

Linux Distros Unpatched Vulnerability : CVE-2018-25026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely,...

Linux Distros Unpatched Vulnerability : CVE-2018-25025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2018-6334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used th...

Linux Distros Unpatched Vulnerability : CVE-2018-21234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set. CVE-2018-21234 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2018-14590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4Processor::ProcessFragments in Core/Ap4Processor.cpp. CVE-2018-14590 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2018-14446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MP4Integer32Property::Read in atomavcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash ...

Linux Distros Unpatched Vulnerability : CVE-2018-11225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows...