CVE-2025-31160

The CVE-2025-31160 entry affects atop through version 2.11.0, enabling local users to cause a denial of service (e.g., assertion failure or application exit) when running unprivileged processes concurrently with another user. Multiple connected advisories confirm affected packages and include pat...

CVE-2025-27591

CVE-2025-27591 – Below privilege escalation : Prior to v0.9.0, the Below service creates a world-writable directory at /var/log/below and writes a world-writable log file, enabling local unprivileged users to perform a symlink attack (e.g., replacing error_root.log with a link to /etc/passwd). Th...

Apple macOS 信息泄露漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS, which stems from a checking improvement that could lead to the disclosure of sensitive user information by local users...

Linux Distros Unpatched Vulnerability : CVE-2022-43995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based...

Linux Distros Unpatched Vulnerability : CVE-2013-7268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ipxrecvmsg function in net/ipx/afipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure h...

Linux Distros Unpatched Vulnerability : CVE-2014-2583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple directory traversal vulnerabilities in pamtimestamp.c in the pamtimestamp module for Linux-PAM aka pam 1.1.8 allow local users to create arbitrary file...

Linux Distros Unpatched Vulnerability : CVE-2012-1096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new...

Linux Distros Unpatched Vulnerability : CVE-2016-10741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 4.9.3, fs/xfs/xfsaops.c allows local users to cause a denial of service system crash because there is a race condition between direct...

Linux Distros Unpatched Vulnerability : CVE-2015-7529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a...

Linux Distros Unpatched Vulnerability : CVE-2015-7837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to...

Linux Distros Unpatched Vulnerability : CVE-2018-21269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink...

Linux Distros Unpatched Vulnerability : CVE-2017-14497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tpacketrcv function in net/packet/afpacket.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2015-8325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dosetupenv function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pamenvironment files ...

Linux Distros Unpatched Vulnerability : CVE-2014-0249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The System Security Services Daemon SSSD 1.11.6 does not properly identify group membership when a non- POSIX group is in a group membership chain, which allows...

Linux Distros Unpatched Vulnerability : CVE-2017-15265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service use-after-free or possibly have unspecifi...

Linux Distros Unpatched Vulnerability : CVE-2014-0047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. CVE-2014-0047 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2013-7281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dgramrecvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data...

Linux Distros Unpatched Vulnerability : CVE-2016-1531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument. CVE-2016-1531 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2015-8777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechani...

Linux Distros Unpatched Vulnerability : CVE-2017-5549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry...