2754 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-10896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling...
Linux Distros Unpatched Vulnerability : CVE-2020-16033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof security UI via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2018-13873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.8.20 library. There is a buffer over-read in H5Ochunkdeserialize in H5Ocache.c. CVE-2018-13873 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2017-12897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint. CVE-2017-12897 Note that Nessus relies on the presence of th...
Linux Distros Unpatched Vulnerability : CVE-2016-7553
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local user...
Linux Distros Unpatched Vulnerability : CVE-2017-10979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows Write overflow in radcoalesce - this allows remote attackers to cause a denial of service daemon crash...
Linux Distros Unpatched Vulnerability : CVE-2020-12351
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CVE-2020-12351 Note that...
Linux Distros Unpatched Vulnerability : CVE-2018-13869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c. CVE-2018-13869 Note that...
Linux Distros Unpatched Vulnerability : CVE-2013-4277
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a...
Linux Distros Unpatched Vulnerability : CVE-2013-2927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before...
Linux Distros Unpatched Vulnerability : CVE-2016-9633
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service infinite loop and resource...
Linux Distros Unpatched Vulnerability : CVE-2018-5407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port...
Linux Distros Unpatched Vulnerability : CVE-2017-9043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - readelf.c in GNU Binutils 2017-04-12 has a shift exponent too large for type unsigned long issue, which might allow remote attackers to cause a denial of servic...
Linux Distros Unpatched Vulnerability : CVE-2019-25059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839. CVE-2019-25059 Note that Ness...
Linux Distros Unpatched Vulnerability : CVE-2020-16287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability in lprnisblack in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of...
Linux Distros Unpatched Vulnerability : CVE-2015-0839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hp-plugin utility in HP Linux Imaging and Printing HPLIP makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a...
Linux Distros Unpatched Vulnerability : CVE-2014-9720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers...
Linux Distros Unpatched Vulnerability : CVE-2015-8984
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fnmatch function in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash...
Linux Distros Unpatched Vulnerability : CVE-2013-0274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of servi...
Linux Distros Unpatched Vulnerability : CVE-2017-9171
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input- bmp.c:492:24. CVE-2017-9171 Note that Nessus relies on...