Linux Distros Unpatched Vulnerability : CVE-2022-1908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. CVE-2022-1908 Note that Nessus relies on the presence of the package as reported by th...

Linux Distros Unpatched Vulnerability : CVE-2023-38667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service. CVE-2023-38667 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2020-6624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c. CVE-2020-6624 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2019-15531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c. CVE-2019-15531 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-19842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly...

Linux Distros Unpatched Vulnerability : CVE-2020-23928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap- based buffer over-read. CVE-2020-23928 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2025-48188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fillbuffer in data/encrypted-file.c to the Gnulib rijndaelDecrypt function, leading to a...

Linux Distros Unpatched Vulnerability : CVE-2019-18849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat...

Adaptive Substance 3D Painter Buffer Overflow

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Linux Distros Unpatched Vulnerability : CVE-2020-36281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c. CVE-2020-36281 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-20453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application...

Linux Distros Unpatched Vulnerability : CVE-2018-19839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-rea...

Linux Distros Unpatched Vulnerability : CVE-2019-15651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASNBOOLEAN byte is mishandled for a...

Tenda AC20 Router set_qosMib_list Code Execution

The vulnerability of the setqosMiblist function in the /goform/SetNetControlList file of the Tenda AC20 router’s microprogramming system is related to reading data beyond the buffer boundary in memory during the processing of the SetNetControlList parameter. Exploiting this vulnerability allows a...

Linux kernel Data Compromise

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2018-10733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of...

Linux Distros Unpatched Vulnerability : CVE-2016-3620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ZIPEncode function in tifzip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the -c zip option is used, allows remote attackers to cause a denial ...

Tenda AC20 Router Sub_46A2AC Function Code Execution

The vulnerability of the sub46A2AC function in the /goform/setMacFilterCfg file of the Tenda AC20 router microprogramming system is related to reading data outside the buffer in memory during the processing of the deviceList parameter. Exploiting this vulnerability allows an attacker to execute...

Tenda AC20 Router Subcode 48E628 Code Execution

The vulnerability of the sub48E628 function in the /goform/SetIpMacBind function of the Tenda AC20 router’s microprogramming system is related to reading data outside the buffer in memory when processing the list parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary...

Linux kernel Data Compromise

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...