17734 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-33816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexe...
Linux Distros Unpatched Vulnerability : CVE-2018-11225
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows...
Linux Distros Unpatched Vulnerability : CVE-2023-21244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation ...
Linux Distros Unpatched Vulnerability : CVE-2024-28824
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL...
Linux Distros Unpatched Vulnerability : CVE-2018-6340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames...
Linux Distros Unpatched Vulnerability : CVE-2022-35089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor at /home/bupt/Desktop/swftools/src/gif2swf. CVE-2022-35089 Not...
Linux Distros Unpatched Vulnerability : CVE-2022-35101
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec- unaligned-erms.S. CVE-2022-35101 Note that Nessus relies ...
Linux Distros Unpatched Vulnerability : CVE-2019-11929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient boundary checks when formatting numbers in numberformat allows read/write access to out-of- bounds memory, potentially leading to remote code...
Linux Distros Unpatched Vulnerability : CVE-2021-23422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an...
Linux Distros Unpatched Vulnerability : CVE-2022-26309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation User operation resulting in elevation of privilege to Administrator group...
Linux Distros Unpatched Vulnerability : CVE-2016-3759
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a crafted application th...
Linux Distros Unpatched Vulnerability : CVE-2011-1195
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact...
Linux Distros Unpatched Vulnerability : CVE-2017-11097
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c. CVE-2017-11097 Note that...
Linux Distros Unpatched Vulnerability : CVE-2024-39308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML tit...
Linux Distros Unpatched Vulnerability : CVE-2021-37937
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that t...
Linux Distros Unpatched Vulnerability : CVE-2017-0483
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated ...
Linux Distros Unpatched Vulnerability : CVE-2016-0810
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements, whi...
Linux Distros Unpatched Vulnerability : CVE-2021-32475
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8,...
Linux Distros Unpatched Vulnerability : CVE-2017-0338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the...
Linux Distros Unpatched Vulnerability : CVE-2022-31187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licens...