Linux Distros Unpatched Vulnerability : CVE-2017-9470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

Linux Distros Unpatched Vulnerability : CVE-2019-6285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SingleDocParser::HandleFlowSequence function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and...

Linux Distros Unpatched Vulnerability : CVE-2017-2902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin'...

Linux Distros Unpatched Vulnerability : CVE-2017-6842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference v...

PT-2025-34617 · Unknown · Sail Image Decoding Library

Name of the Vulnerable Software and Affected Versions: SAIL Image Decoding Library version 0.9.8 Description: A memory corruption issue exists in the PCX Image Decoding functionality of the library. Decoding image data from a crafted .pcx file can lead to a heap-based buffer overflow, potentially...

SAIL Image Decoding Library WebP Image Decoding integer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2224 SAIL Image Decoding Library WebP Image Decoding integer overflow vulnerability August 25, 2025 CVE Number CVE-2025-52456 SUMMARY A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8...

Linux Distros Unpatched Vulnerability : CVE-2016-6702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a...

Linux Distros Unpatched Vulnerability : CVE-2017-5665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The spltcueexporttofile function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a...

Linux Distros Unpatched Vulnerability : CVE-2017-5851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The freeoptions function in optionsmanager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a...

Linux Distros Unpatched Vulnerability : CVE-2017-6847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a...

Linux Distros Unpatched Vulnerability : CVE-2018-11243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PackLinuxElf64::unpack in plxelf.cpp in UPX 3.95 allows remote attackers to cause a denial of service double free, limit the ability of a malware scanner to...

Linux Distros Unpatched Vulnerability : CVE-2017-9847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash v...

Linux Distros Unpatched Vulnerability : CVE-2016-9813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash vi...

Linux Distros Unpatched Vulnerability : CVE-2017-6841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2016-7906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service use-after- free via a crafted file. CVE-2016-7906 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2016-3861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between...

Linux Distros Unpatched Vulnerability : CVE-2017-9301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - plugins\audiofilter\libmpgatofixed32plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service invalid read and...

CVE-2009-20004

gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code...

CVE-2025-55454

An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2009-20004

gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code...