Linux Distros Unpatched Vulnerability : CVE-2022-30597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field. CVE-2022-30597 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-24583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read...

Linux Distros Unpatched Vulnerability : CVE-2023-5545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - H5P metadata automatically populated the author with the user's username, which could be sensitive information. CVE-2023-5545 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-25981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided...

Linux Distros Unpatched Vulnerability : CVE-2024-25983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available e.g....

Linux Distros Unpatched Vulnerability : CVE-2024-38275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sen...

Linux Distros Unpatched Vulnerability : CVE-2023-5549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the...

Linux Distros Unpatched Vulnerability : CVE-2017-7532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, course creators are able to change system default settings for courses. CVE-2017-7532 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2018-7339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2022-0238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF CVE-2022-0238 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-0157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross- site Scripting' CVE-2022-0157 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2025-26526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities. CVE-2025-265...

Linux Distros Unpatched Vulnerability : CVE-2011-3727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an erro...

Linux Distros Unpatched Vulnerability : CVE-2025-9572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which...

Linux Distros Unpatched Vulnerability : CVE-2022-0196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF CVE-2022-0196 Note that Nessus relies on the presence of the package as reported by the...

📄 Sudo Chroot 1.9.17 Privilege Escalation

This Metasploit module exploits the chroot vulnerability in Sudo versions prior to 1.9.17p1. It allows the attacker to trick Sudo into loading an arbitrary shared object, thus resulting in a privilege escalation. This module requires Metasploit: https://metasploit.com/download Current source:...

Linux Distros Unpatched Vulnerability : CVE-2017-12157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access. CVE-2017-12157 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2025-9809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue...

Linux Distros Unpatched Vulnerability : CVE-2021-34339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString in decompiler.c file that causes a direct segmentation fault and leads to denial o...

Linux Distros Unpatched Vulnerability : CVE-2018-20427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132. CVE-2018-20427 Note...