Linux Distros Unpatched Vulnerability : CVE-2018-16541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the...

Linux Distros Unpatched Vulnerability : CVE-2018-3750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The utilities function in all versions = 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when the attacker can contro...

Linux Distros Unpatched Vulnerability : CVE-2018-5335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available...

Linux Distros Unpatched Vulnerability : CVE-2018-8777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker can pass a large HTTP request with a crafted...

Linux Distros Unpatched Vulnerability : CVE-2018-15908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files...

Linux Distros Unpatched Vulnerability : CVE-2018-19518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function i...

Linux Distros Unpatched Vulnerability : CVE-2018-14952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mail message display page in SquirrelMail through 1.4.22 has XSS via a maction xlink:href= attack. CVE-2018-14952 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2018-7170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral...

Linux Distros Unpatched Vulnerability : CVE-2018-7409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In unixODBC before 2.3.5, there is a buffer overflow in the unicodetoansicopy function in DriverManager/info.c. CVE-2018-7409 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-16517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - asm/labels.c in Netwide Assembler NASM is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file...

Linux Distros Unpatched Vulnerability : CVE-2018-10779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff. CVE-2018-10779 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-10120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations...

Linux Distros Unpatched Vulnerability : CVE-2018-11504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a...

Linux Distros Unpatched Vulnerability : CVE-2018-8798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak. CVE-2018-8798 Note...

Linux Distros Unpatched Vulnerability : CVE-2018-4121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes...

Linux Distros Unpatched Vulnerability : CVE-2018-19541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20...

Linux Distros Unpatched Vulnerability : CVE-2018-19661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulawarray in ulaw.c that will lead to a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-25033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ADMesh through 0.98.4 has a heap-based buffer over-read in stlupdateconnectsremove1 called from stlremovedegenerate in connect.c in libadmesh.a. CVE-2018-25033...

Linux Distros Unpatched Vulnerability : CVE-2018-17294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The matchCurrentInput function inside loutranslateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a deni...

Linux Distros Unpatched Vulnerability : CVE-2018-14359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data. CVE-2018-14359 Note that Nessus relies...