59054 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-15612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink...
Linux Distros Unpatched Vulnerability : CVE-2025-48708
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its...
Linux Distros Unpatched Vulnerability : CVE-2018-6074
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2024-22259
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL e.g. through a query parameter AND perform validation checks ...
Linux Distros Unpatched Vulnerability : CVE-2021-44533
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Node.js 12.22.9, 14.18.3, 16.13.2, and 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects...
Linux Distros Unpatched Vulnerability : CVE-2022-35065
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724. CVE-2022-35065 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2025-21619
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. An administrator user can perfom a SQL injection through the rules configuration forms. This...
Linux Distros Unpatched Vulnerability : CVE-2022-28959
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web...
Linux Distros Unpatched Vulnerability : CVE-2020-6838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In mruby 2.1.0, there is a use-after-free in hashvaluesat in mrbgems/mruby-hash-ext/src/hash-ext.c. CVE-2020-6838 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2024-26143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using...
Linux Distros Unpatched Vulnerability : CVE-2022-42309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an...
Linux Distros Unpatched Vulnerability : CVE-2016-1000346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be us...
Linux Distros Unpatched Vulnerability : CVE-2021-22134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not...
Linux Distros Unpatched Vulnerability : CVE-2021-32563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a differen...
Linux Distros Unpatched Vulnerability : CVE-2023-0842
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validat...
Linux Distros Unpatched Vulnerability : CVE-2024-22513
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their...
Linux Distros Unpatched Vulnerability : CVE-2018-6041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2021-30199
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4...
Linux Distros Unpatched Vulnerability : CVE-2020-24616
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to...
Linux Distros Unpatched Vulnerability : CVE-2021-32728
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature...