Linux Distros Unpatched Vulnerability : CVE-2020-35136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by...

Linux Distros Unpatched Vulnerability : CVE-2020-9849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0...

Linux Distros Unpatched Vulnerability : CVE-2020-6620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8. CVE-2020-6620 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2020-15153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaroun...

Linux Distros Unpatched Vulnerability : CVE-2020-23323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-buffer-overflow at re-parser.c in reparsecharescape in JerryScript 2.2.0. CVE-2020-23323 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2020-1921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer. This issu...

Linux Distros Unpatched Vulnerability : CVE-2020-10945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Centreon before 19.10.7 exposes Session IDs in server responses. CVE-2020-10945 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2020-23026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS. CVE-2020-23026 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2020-7659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2020-0336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges...

Linux Distros Unpatched Vulnerability : CVE-2020-23909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1. CVE-2020-23909 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2020-23312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an Assertion 'context.statusflags & PARSERSCANNINGSUCCESSFUL' failed at js-parser.c:2185 in parserparsesource in JerryScript 2.2.0. CVE-2020-23312 Note...

Linux Distros Unpatched Vulnerability : CVE-2020-3315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the...

Linux Distros Unpatched Vulnerability : CVE-2020-7739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...

Linux Distros Unpatched Vulnerability : CVE-2020-23302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-use-after-free at ecma-helpers-string.c:772 in ecmarefecmastring in JerryScript 2.2.0 CVE-2020-23302 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2020-29657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JerryScript 2.3.0, there is an out-of-bounds read in mainprintunhandledexception in the main-utils.c file. CVE-2020-29657 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2020-17534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in webkit subproject of HTML/Java API versi...

Linux Distros Unpatched Vulnerability : CVE-2020-19491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly...

Linux Distros Unpatched Vulnerability : CVE-2020-10996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place o...

Linux Distros Unpatched Vulnerability : CVE-2020-6617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint. CVE-2020-6617 Note that Nessus relies on the presence of the package as reported by the...