Linux Distros Unpatched Vulnerability : CVE-2017-7748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. Th...

Linux Distros Unpatched Vulnerability : CVE-2016-5359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-14735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL. CVE-2017-14735 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2020-10722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map...

Linux Distros Unpatched Vulnerability : CVE-2018-12015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via...

Linux Distros Unpatched Vulnerability : CVE-2017-6348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial ...

Linux Distros Unpatched Vulnerability : CVE-2019-14563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2019-14563 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2019-15924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.0.11. fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c has a NULL pointer dereference becaus...

Linux Distros Unpatched Vulnerability : CVE-2018-5360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over- read in the ReadTIFFImage function in coders/tiff.c in...

Linux Distros Unpatched Vulnerability : CVE-2019-19204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH i...

Linux Distros Unpatched Vulnerability : CVE-2018-12934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rememberKtype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption aka OOM. This can...

Linux Distros Unpatched Vulnerability : CVE-2018-14042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. CVE-2018-14042 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2015-6749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a...

Linux Distros Unpatched Vulnerability : CVE-2012-5498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a...

Linux Distros Unpatched Vulnerability : CVE-2014-10072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links. CVE-2014-10072 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2014-10071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the & fd syntax. CVE-2014-10071 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2013-4276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple stack-based buffer overflows in LittleCMS aka lcms or liblcms 1.19 and earlier allow remote attackers to cause a denial of service crash via a crafted ...

Linux Distros Unpatched Vulnerability : CVE-2018-14951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mail message display page in SquirrelMail through 1.4.22 has XSS via a form action='data:text attack. CVE-2018-14951 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2018-1002100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, a...

Linux Distros Unpatched Vulnerability : CVE-2017-9347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c...