Linux Distros Unpatched Vulnerability : CVE-2024-34008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk. CVE-2024-34008 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-5547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The course upload preview contained an XSS risk for users uploading unsafe data. CVE-2023-5547 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2024-38273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access. CVE-2024-38273...

Linux Distros Unpatched Vulnerability : CVE-2024-9622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the resteasy-netty4 library arising from improper handling of HTTP requests using smuggling techniques. When an HTTP smuggling...

Linux Distros Unpatched Vulnerability : CVE-2023-40318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2023-40318 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

Linux Distros Unpatched Vulnerability : CVE-2017-11734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2023-5549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the...

Linux Distros Unpatched Vulnerability : CVE-2024-25979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The URL parameters accepted by forum search were not limited to the allowed parameters. CVE-2024-25979 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-11704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a...

Linux Distros Unpatched Vulnerability : CVE-2023-5542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Students in Only see own membership groups could see other students in the group, which should be hidden. CVE-2023-5542 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2017-11729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2022-0984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Users with the capability to configure badge criteria teachers and managers by default were able to configure course badges with profile field criteria, which...

Linux Distros Unpatched Vulnerability : CVE-2024-34000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk. CVE-2024-34000 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-24583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read...

Linux Distros Unpatched Vulnerability : CVE-2024-25982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The link to update all installed language packs did not include the necessary token to prevent a CSRF risk. CVE-2024-25982 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2022-30597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field. CVE-2022-30597 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-25980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided...

Linux Distros Unpatched Vulnerability : CVE-2023-5545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - H5P metadata automatically populated the author with the user's username, which could be sensitive information. CVE-2023-5545 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-24584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read...

Linux Distros Unpatched Vulnerability : CVE-2024-38275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sen...