Linux Distros Unpatched Vulnerability : CVE-2017-11730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2023-5547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The course upload preview contained an XSS risk for users uploading unsafe data. CVE-2023-5547 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2022-0984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Users with the capability to configure badge criteria teachers and managers by default were able to configure course badges with profile field criteria, which...

Linux Distros Unpatched Vulnerability : CVE-2017-11729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2023-5549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the...

Linux Distros Unpatched Vulnerability : CVE-2022-30597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field. CVE-2022-30597 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-25983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available e.g....

Linux Distros Unpatched Vulnerability : CVE-2023-5545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - H5P metadata automatically populated the author with the user's username, which could be sensitive information. CVE-2023-5545 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-25981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided...

Linux Distros Unpatched Vulnerability : CVE-2024-9622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling...

Linux Distros Unpatched Vulnerability : CVE-2017-7532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, course creators are able to change system default settings for courses. CVE-2017-7532 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2024-38275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sen...

Linux Distros Unpatched Vulnerability : CVE-2024-24583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read...

Linux Distros Unpatched Vulnerability : CVE-2022-0157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross- site Scripting' CVE-2022-0157 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2022-0196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF CVE-2022-0196 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2025-9572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which...

Linux Distros Unpatched Vulnerability : CVE-2022-0238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF CVE-2022-0238 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2018-7339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2011-3727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an erro...

Linux Distros Unpatched Vulnerability : CVE-2025-26526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities. CVE-2025-265...