1954 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-25050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4getatt called from nc4getatttc and ncgetatttext and in uffdcleanup called from...
Linux Distros Unpatched Vulnerability : CVE-2018-19756
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service. CVE-2018-19756 Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2020-25788
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Tiny Tiny RSS aka tt-rss before 2020-09-16. imgproxy in plugins/afproxyhttp/init.php mishandles $REQUESTurl in an error message...
Linux Distros Unpatched Vulnerability : CVE-2022-27146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag. CVE-2022-27146 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2020-14711
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to...
Linux Distros Unpatched Vulnerability : CVE-2018-10847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session...
Linux Distros Unpatched Vulnerability : CVE-2020-36228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial o...
Linux Distros Unpatched Vulnerability : CVE-2023-0996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image fi...
Linux Distros Unpatched Vulnerability : CVE-2021-30951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS...
Linux Distros Unpatched Vulnerability : CVE-2021-30795
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7...
Linux Distros Unpatched Vulnerability : CVE-2018-25110
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service ReDoS attack due to catastrophic backtracking in several regular...
Linux Distros Unpatched Vulnerability : CVE-2020-8163
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to...
Linux Distros Unpatched Vulnerability : CVE-2019-10751
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied...
Linux Distros Unpatched Vulnerability : CVE-2020-8555
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side...
Linux Distros Unpatched Vulnerability : CVE-2020-27794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free issue was discovered in radare2 in cmdinfo.c:cmdinfo. Successful exploitation could lead to modification of unexpected memory locations and...
Linux Distros Unpatched Vulnerability : CVE-2017-12105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mesh. A...
Linux Distros Unpatched Vulnerability : CVE-2021-45831
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via strlenavx2, which causes a Denial of Service. CVE-2021-45831 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2018-4441
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari...
Linux Distros Unpatched Vulnerability : CVE-2020-36843
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential...
Linux Distros Unpatched Vulnerability : CVE-2018-4262
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issues...