Linux Distros Unpatched Vulnerability : CVE-2019-9826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fulltext search component in phpBB before 3.2.6 allows Denial of Service. CVE-2019-9826 Note that Nessus relies on the presence of the package as reported b...

Linux Distros Unpatched Vulnerability : CVE-2020-11825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user'...

Linux Distros Unpatched Vulnerability : CVE-2021-37937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that t...

Linux Distros Unpatched Vulnerability : CVE-2022-47747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs. CVE-2022-47747 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2024-24198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c. CVE-2024-24198 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2020-6622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8. CVE-2020-6622 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2022-38497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. CVE-2022-38497 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2020-1919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect bounds calculations in substrcompare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issu...

Linux Distros Unpatched Vulnerability : CVE-2020-27740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. NOTE: this was reported to the vendor in a...

Linux Distros Unpatched Vulnerability : CVE-2019-15062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Dolibarr 11.0.0-alpha. A user can store an IFRAME element containing a user/card.php CSRF request in his Linked Files settings page...

Linux Distros Unpatched Vulnerability : CVE-2021-23432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge CVE-2021-23432 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-0746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0. CVE-2022-0746 Note that Nessus relies on the presence of the package as reported by...

Linux Distros Unpatched Vulnerability : CVE-2022-40885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service. CVE-2022-40885 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2015-3734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or...

Linux Distros Unpatched Vulnerability : CVE-2016-1854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2024-47079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmwar...

Linux Distros Unpatched Vulnerability : CVE-2010-3818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote...

Linux Distros Unpatched Vulnerability : CVE-2015-5651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Dotclear before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Linux Distros Unpatched Vulnerability : CVE-2017-0410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a...

Linux Distros Unpatched Vulnerability : CVE-2024-6747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 EOL allows attacker to get potentially sensitive data...