8542 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-12617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled e.g. via setting the...
Linux Distros Unpatched Vulnerability : CVE-2016-4804
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readboot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service crash via a crafted filesystem, which triggers a heap-bas...
Linux Distros Unpatched Vulnerability : CVE-2015-7315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new...
Linux Distros Unpatched Vulnerability : CVE-2021-28276
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c. CVE-2021-28276...
Linux Distros Unpatched Vulnerability : CVE-2017-12151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection cou...
Linux Distros Unpatched Vulnerability : CVE-2015-8366
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary...
Linux Distros Unpatched Vulnerability : CVE-2017-5834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out- of-bounds heap read and crash via a crafted file...
Linux Distros Unpatched Vulnerability : CVE-2020-15954
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDE KMail 19.12.3 aka 5.13.3 engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use. CVE-2020-15954 Note that...
Linux Distros Unpatched Vulnerability : CVE-2019-6237
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1,...
Linux Distros Unpatched Vulnerability : CVE-2017-13011
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util- print.c:bittok2strinternal. CVE-2017-13011 Note that Nessus relies on th...
Linux Distros Unpatched Vulnerability : CVE-2018-11362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffe...
Linux Distros Unpatched Vulnerability : CVE-2019-14662
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Brandy 1.20.1 has a stack-based buffer overflow in fileioopenout in fileio.c via crafted BASIC source code. CVE-2019-14662 Note that Nessus relies on the presen...
Linux Distros Unpatched Vulnerability : CVE-2019-12522
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Squid through 4.7. When Squid is run as root, it spawns its child processes as a lesser user, by default the user nobody. This is don...
Linux Distros Unpatched Vulnerability : CVE-2017-7506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice...
Linux Distros Unpatched Vulnerability : CVE-2021-30002
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. videousercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak f...
Linux Distros Unpatched Vulnerability : CVE-2017-6463
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config...
Linux Distros Unpatched Vulnerability : CVE-2020-27223
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 inclusive, 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large...
Linux Distros Unpatched Vulnerability : CVE-2019-8688
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3,...
Linux Distros Unpatched Vulnerability : CVE-2016-2185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The atiremote2probe function in drivers/input/misc/atiremote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of...
Linux Distros Unpatched Vulnerability : CVE-2017-17680
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of...