17524 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-9605
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vmwgbsurfacedefineioctl function accessible via DRMIOCTLVMWGBSURFACECREATE in drivers/gpu/drm/vmwgfx/vmwgfxsurface.c in the Linux kernel through 4.11.4...
Linux Distros Unpatched Vulnerability : CVE-2015-3238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The unixrunhelperbinary function in the pamunix module in Linux-PAM aka pam before 1.2.1, when unable to directly access passwords, allows local users to...
Linux Distros Unpatched Vulnerability : CVE-2007-6761
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobufmapping data structures, which allows local users to trigge...
Linux Distros Unpatched Vulnerability : CVE-2010-4706
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pamsmclosesession function in pamxauth.c in the pamxauth module in Linux-PAM aka pam 1.1.2 and earlier does not properly handle a failure to determine a...
Linux Distros Unpatched Vulnerability : CVE-2011-0543
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypas...
Linux Distros Unpatched Vulnerability : CVE-2009-3897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user...
Linux Distros Unpatched Vulnerability : CVE-2010-3316
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The runcoprocess function in pamxauth.c in the pamxauth module in Linux-PAM aka pam before 1.1.2 does not check the return values of the setuid, setgid, and...
Linux Distros Unpatched Vulnerability : CVE-2011-2495
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc//io files, which allows local users to obtain sensitive I/O...
Linux Distros Unpatched Vulnerability : CVE-2011-2472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. dot dot in the...
Linux Distros Unpatched Vulnerability : CVE-2010-4661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. CVE-2010-4661 Note that Nessus relies on the presence of the package as reported...
Linux Distros Unpatched Vulnerability : CVE-2011-0523
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files...
Linux Distros Unpatched Vulnerability : CVE-2011-4080
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sysrqsysctlhandler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAPSYSADMIN capability to modify the dmesgrestrict...
Linux Distros Unpatched Vulnerability : CVE-2010-1439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the...
Linux Distros Unpatched Vulnerability : CVE-2011-1095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locale/programs/locale.c in locale in the GNU C Library aka glibc or libc6 before 2.13 does not quote its output, which might allow local users to gain privileg...
Linux Distros Unpatched Vulnerability : CVE-2011-4578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - event.c in acpid aka acpid2 before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to...
Linux Distros Unpatched Vulnerability : CVE-2011-0017
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to appen...
Linux Distros Unpatched Vulnerability : CVE-2010-1160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file- save operation, which allows local user-assisted...
Linux Distros Unpatched Vulnerability : CVE-2011-3640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted search path vulnerability in Mozilla Network Security Services NSS, as used in Google Chrome before 17 on Windows and Mac OS X, might allow local user...
Linux Distros Unpatched Vulnerability : CVE-2011-4110
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The userupdate function in security/keys/userdefined.c in the Linux kernel 2.6 allows local users to cause a denial of service NULL pointer dereference and kern...
