Linux Distros Unpatched Vulnerability : CVE-2024-45781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of...

Linux Distros Unpatched Vulnerability : CVE-2021-3521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a binding signature. RPM does not check the binding...

Linux Distros Unpatched Vulnerability : CVE-2021-3572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a differen...

Linux Distros Unpatched Vulnerability : CVE-2024-47690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: get rid of online repaire on corrupted directory syzbot reports a f2fs bug as below: kernel BUG at fs/f2fs/inode.c:896! RIP:...

The vulnerability of GitLab Pages, a software platform based on Git for collaborative code development on GitLab, allows attackers to influence the integrity of data.

The vulnerability of GitLab Pages, a software platform based on Git for collaborative code development on GitLab, is related to incomplete comparisons with absent factors. Exploiting this vulnerability could allow a malicious actor to influence the integrity of data...

Linux Distros Unpatched Vulnerability : CVE-2020-25715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting XSS attack to inject code into the...

Linux Distros Unpatched Vulnerability : CVE-2020-25647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB...

Linux Distros Unpatched Vulnerability : CVE-2022-48627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause...

The vulnerability of the Thunderbird email client, specifically Thunderbird ESR, arises from insufficient verification of data authenticity, allowing attackers to influence the integrity of the data.

The vulnerability of the Thunderbird email client, specifically Thunderbird ESR, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to influence the integrity of data...

Linux Distros Unpatched Vulnerability : CVE-2020-14351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf...

Linux Distros Unpatched Vulnerability : CVE-2020-10713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows...

Linux Distros Unpatched Vulnerability : CVE-2021-20303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger...

Linux Distros Unpatched Vulnerability : CVE-2021-20208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the...

Linux Distros Unpatched Vulnerability : CVE-2020-27752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap...

Linux Distros Unpatched Vulnerability : CVE-2021-20293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding whe...

The vulnerability in the software installation tool of Acronis Cyber Protect 16 allows a perpetrator to compromise the integrity of the protected information.

The vulnerability in the Acronis Cyber Protect 16 software installation tool is related to the use of an algorithm whose security requirements are not met for the hash function. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...

CVE-2024-51962

A SQL injection vulnerability in ArcGIS Server allows an EDIT operation to modify column properties in a manner that could lead to SQL injection when performed by a remote authenticated user requiring elevated, non‑administrative privileges. Exploitation is restricted to users with advanced...

CVE-2024-45782

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grubfsmount, the HFS filesystem driver performs a strcpy using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer,...

CVE-2024-45782

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grubfsmount, the HFS filesystem driver performs a strcpy using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer,...

CVE-2024-45782

CVE-2024-45782 affects grub2, specifically the HFS filesystem path where grub_fs_mount() uses strcpy on a user-provided volume name, enabling a heap-based out-of-bounds write and potential secure-boot bypass. Affected packages include grub2 prior to the updated 2.06 releases; remediation is to up...