1954 matches found
Linux Distros Unpatched Vulnerability : CVE-2015-3255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain...
Linux Distros Unpatched Vulnerability : CVE-2014-9654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Regular Expressions package in International Components for Unicode ICU for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculate...
Linux Distros Unpatched Vulnerability : CVE-2014-9833
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. CVE-2014-9833 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2015-1380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body. CVE-2015-1380 Note that Nessus relie...
Linux Distros Unpatched Vulnerability : CVE-2016-4006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial o...
Linux Distros Unpatched Vulnerability : CVE-2014-9939
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. CVE-2014-9939 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2016-9395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jasseq2dcreate function in jasseq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service assertion failure via a crafted file...
Linux Distros Unpatched Vulnerability : CVE-2017-9525
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root...
Linux Distros Unpatched Vulnerability : CVE-2015-7554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecifie...
Linux Distros Unpatched Vulnerability : CVE-2019-5716
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its...
Linux Distros Unpatched Vulnerability : CVE-2017-5050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to...
Linux Distros Unpatched Vulnerability : CVE-2020-16018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a...
Linux Distros Unpatched Vulnerability : CVE-2017-7995
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to...
Linux Distros Unpatched Vulnerability : CVE-2016-7478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zend/zendexceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service infinite loop via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2018-5336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the...
Linux Distros Unpatched Vulnerability : CVE-2019-3842
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In systemd before v242-rc4, it was discovered that pamsystemd does not properly sanitize the environment before using the XDGSEAT variable. It is possible for a...
Linux Distros Unpatched Vulnerability : CVE-2016-9398
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
Linux Distros Unpatched Vulnerability : CVE-2012-3482
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to 1 cause a denial of service crash and delayed delive...
Linux Distros Unpatched Vulnerability : CVE-2016-7925
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint. CVE-2016-7925 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2018-6914
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before...