20240 matches found
Linux Distros Unpatched Vulnerability : CVE-2012-0061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a...
Linux Distros Unpatched Vulnerability : CVE-2012-0815
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary co...
Linux Distros Unpatched Vulnerability : CVE-2012-4444
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via...
Linux Distros Unpatched Vulnerability : CVE-2012-0866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission...
Linux Distros Unpatched Vulnerability : CVE-2012-2142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a...
Linux Distros Unpatched Vulnerability : CVE-2012-0041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dissectpacket function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2012-1150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collision...
Linux Distros Unpatched Vulnerability : CVE-2012-0880
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table...
Linux Distros Unpatched Vulnerability : CVE-2012-1573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gnutlscipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote...
Linux Distros Unpatched Vulnerability : CVE-2012-0456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through...
Linux Distros Unpatched Vulnerability : CVE-2012-2123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The capbprmsetcreds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities aka fcaps for...
Linux Distros Unpatched Vulnerability : CVE-2012-3417
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The goodclient function in rquotad rquotasvc.c in Linux DiskQuota aka quota before 3.17 invokes the hostsctl function the first time without a host name, which...
Linux Distros Unpatched Vulnerability : CVE-2012-5639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice and OpenOffice automatically open embedded content CVE-2012-5639 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2012-1584
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context- dependent attackers to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2012-2750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a Security Fix, aka Bug 59533. NOTE: this might be a...
Linux Distros Unpatched Vulnerability : CVE-2012-4430
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dumpresource function in dird/dirdconf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain...
Linux Distros Unpatched Vulnerability : CVE-2012-6657
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The socksetsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, whic...
Linux Distros Unpatched Vulnerability : CVE-2012-0789
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service memory consumption by triggering many strtoti...
Linux Distros Unpatched Vulnerability : CVE-2012-5638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content o...
Linux Distros Unpatched Vulnerability : CVE-2012-6089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to...