66 matches found
EUVD-2019-3134
Malware in sbrugna...
EUVD-2017-6105
Malware in sbrugna...
EUVD-2016-6268
Malware in sbrugna...
EUVD-2022-39927
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-37290
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive. CVE-2022-37290 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-14604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file'...
Nautilus: Denial of Service
Background Default file manager for the GNOME desktop Description Please review the CVE identifier referenced below for details. Impact GNOME Nautilus allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive. Workaround There is no known workaround at this time...
RHEL 6 : nautilus (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nautilus: Insufficient validation of trust of .desktop files with execute permission CVE-2017-14604 - GNO...
Fedora 37 : nautilus (2023-dbe1157188)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dbe1157188 advisory. Update to 43.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Medium: nautilus
Issue Overview: GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive. CVE-2022-37290 Affected Packages: nautilus Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between A...
SUSE CVE-2019-11461
An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing...
SUSE CVE-2016-5317
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack crash via a crafted TIFF file...
SUSE SLED12: gnome-shell-search-provider-nautilus / libnautilus-extension1 / etc (SUSE-SU-2022:4394-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4394-1 advisory. - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives bsc1205418. Tenable has extracted the precedi...
DEBIAN-CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...
Null pointer dereference
GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...
CVE-2022-37290
CVE-2022-37290 affects GNOME Nautilus (GNOME Nautilus 42.2) and is triggered by pasting a crafted ZIP archive, causing a NULL pointer dereference and an application crash. The vulnerability is exploitable locally with low privileges and no user interaction required, per the CVSS data. Several con...