Linux Distros Unpatched Vulnerability : CVE-2015-3243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron. CVE-2015-324...

Linux Distros Unpatched Vulnerability : CVE-2017-15131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask...

Linux Distros Unpatched Vulnerability : CVE-2018-10111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GEGL through 0.3.32. The renderrectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of...

Linux Distros Unpatched Vulnerability : CVE-2020-13987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for ...

Linux Distros Unpatched Vulnerability : CVE-2017-12183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute...

Linux Distros Unpatched Vulnerability : CVE-2014-3521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The component in 1 /luci/homebase and 2 /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via ...

Linux Distros Unpatched Vulnerability : CVE-2017-9262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-926...

Linux Distros Unpatched Vulnerability : CVE-2015-8935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sapiheaderop function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering...

Linux Distros Unpatched Vulnerability : CVE-2017-11724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data...

Linux Distros Unpatched Vulnerability : CVE-2014-9812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted ps file. CVE-2014-9812 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2017-11338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service...

Linux Distros Unpatched Vulnerability : CVE-2020-16305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability in pcxwriterle in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2015-3143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2016-6209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Nagios. CVE-2016-6209 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

Linux Distros Unpatched Vulnerability : CVE-2013-2027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via...

Linux Distros Unpatched Vulnerability : CVE-2017-6892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libsndfile version 1.0.28, an error in the aiffreadchanmap function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially...

Linux Distros Unpatched Vulnerability : CVE-2012-3825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service infinite loop via vectors...

Linux Distros Unpatched Vulnerability : CVE-2016-2147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to cause a denial of service crash via a malformed RFC1035-encoded...

Linux Distros Unpatched Vulnerability : CVE-2019-7548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled. CVE-2019-7548 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2016-2085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users...