900 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-9488
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-midd...
Linux Distros Unpatched Vulnerability : CVE-2016-5040
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a large length value in a compilation unit header...
Linux Distros Unpatched Vulnerability : CVE-2018-10779
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff. CVE-2018-10779 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2021-28302
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the ParserparseDocument function. ixmlNodefree will release a child node...
Linux Distros Unpatched Vulnerability : CVE-2015-0294
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. CVE-2015-0294 Note that Nessus relies on the presence o...
Linux Distros Unpatched Vulnerability : CVE-2019-18391
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a...
Linux Distros Unpatched Vulnerability : CVE-2014-1335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory...
Linux Distros Unpatched Vulnerability : CVE-2018-5146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox 59.0.1, Firefox ES...
Linux Distros Unpatched Vulnerability : CVE-2015-4803
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via...
Linux Distros Unpatched Vulnerability : CVE-2016-0644
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and...
Linux Distros Unpatched Vulnerability : CVE-2019-16319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon...
Linux Distros Unpatched Vulnerability : CVE-2015-4882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related...
Linux Distros Unpatched Vulnerability : CVE-2016-7136
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross- site scripting XSS attacks via a crafted GET request...
Linux Distros Unpatched Vulnerability : CVE-2017-1000483
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method...
Linux Distros Unpatched Vulnerability : CVE-2010-1637
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to sc...
Linux Distros Unpatched Vulnerability : CVE-2011-2981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properl...
Linux Distros Unpatched Vulnerability : CVE-2010-3452
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or...
Linux Distros Unpatched Vulnerability : CVE-2011-3647
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript...
Linux Distros Unpatched Vulnerability : CVE-2010-4054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gstype2interpret function in Ghostscript allows remote attackers to cause a denial of service incorrect pointer dereference and application crash via crafte...
Linux Distros Unpatched Vulnerability : CVE-2011-2911
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and...