Linux Distros Unpatched Vulnerability : CVE-2023-5542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Students in Only see own membership groups could see other students in the group, which should be hidden. CVE-2023-5542 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2017-11729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2022-0984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Users with the capability to configure badge criteria teachers and managers by default were able to configure course badges with profile field criteria, which...

Linux Distros Unpatched Vulnerability : CVE-2024-34000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk. CVE-2024-34000 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-24583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read...

Linux Distros Unpatched Vulnerability : CVE-2024-25982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The link to update all installed language packs did not include the necessary token to prevent a CSRF risk. CVE-2024-25982 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2022-30597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field. CVE-2022-30597 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-25980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided...

Linux Distros Unpatched Vulnerability : CVE-2023-5545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - H5P metadata automatically populated the author with the user's username, which could be sensitive information. CVE-2023-5545 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-24584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read...

Linux Distros Unpatched Vulnerability : CVE-2024-38275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sen...

Linux Distros Unpatched Vulnerability : CVE-2024-25981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided...

Linux Distros Unpatched Vulnerability : CVE-2024-25983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available e.g....

Linux ext4_dirty_journalled_data DoS

The vulnerability of the ext4dirtyjournalleddata function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux anon inode make_secure_inode DoS

The vulnerability of the anon inode.makesecure inode function in the Linux operating system is related to the exhaustion of file descriptors. Exploiting this vulnerability could allow a attacker to cause service failures...

Linux megaraid_sas DoS

The vulnerability of the megaraidsas function in the Linux operating system is related to incorrect calculation of the index. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2017-7532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, course creators are able to change system default settings for courses. CVE-2017-7532 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2017-11730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2024-34008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF risk. CVE-2024-34008 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-5547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The course upload preview contained an XSS risk for users uploading unsafe data. CVE-2023-5547 Note that Nessus relies on the presence of the package as reporte...