1489 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-0351
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2. CVE-2022-0351 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2024-42292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kobjectuevent: Fix OOB access within zapmodaliasenv zapmodaliasenv wrongly calculates size of memory block to move, so will cause OOB memory access issue if...
Linux Distros Unpatched Vulnerability : CVE-2024-26960
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between freeswapandcache and swapoff There was previously a theoretical...
Linux Distros Unpatched Vulnerability : CVE-2022-49623
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/xive/spapr: correct bitmap allocation size kasan detects access beyond the end of the xibm-bitmap allocation: BUG: KASAN: slab-out-of-bounds in...
Linux Distros Unpatched Vulnerability : CVE-2023-1637
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionali...
Linux Distros Unpatched Vulnerability : CVE-2024-47757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix potential oob read in nilfsbtreecheckdelete The function nilfsbtreecheckdelete, which checks whether degeneration to direct mapping occurs before...
Linux Distros Unpatched Vulnerability : CVE-2024-40929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check nssids before accessing the ssids In some versions of cfg80211, th...
Linux Distros Unpatched Vulnerability : CVE-2021-39259
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfsinodelookupbyname, in NTFS-3G 2021.8.22. CVE-2021-392...
Linux Distros Unpatched Vulnerability : CVE-2023-28866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally inval...
Linux Distros Unpatched Vulnerability : CVE-2021-47301
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: igb: Fix use-after-free error during reset Cleans the next descriptor to watch nexttowatch...
Linux Distros Unpatched Vulnerability : CVE-2024-0229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different...
Linux Distros Unpatched Vulnerability : CVE-2022-24807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to...
Linux Distros Unpatched Vulnerability : CVE-2015-8713
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allow...
Linux Distros Unpatched Vulnerability : CVE-2017-6892
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libsndfile version 1.0.28, an error in the aiffreadchanmap function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially...
Linux Distros Unpatched Vulnerability : CVE-2015-5301
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which...
Linux Distros Unpatched Vulnerability : CVE-2016-6345
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RESTEasy allows remote authenticated users to obtain sensitive information by leveraging insufficient use of random values in async jobs. CVE-2016-6345 Note tha...
Linux Distros Unpatched Vulnerability : CVE-2020-11095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array...
CVE-2025-27094
CVE-2025-27094 affects Tuleap Community Edition 16.4.99.1739806825–16.4.99.1739877910 and Tuleap Enterprise Edition prior to 16.3-9 or 16.4-4. The issue allows a user with tracker access to force-reset certain field configurations, leading to potential information loss; specific attributes for da...
CVE-2025-27094 Tuleap allows default values to be cleared from field configuration
Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute...
CVE-2025-25185
CVE-2025-25185: GPT Academic exposes a back-linking vulnerability in 3.91 and earlier where soft links are not properly handled during tar.gz extraction. An attacker can create a malicious file as a soft link to a target server file, package it in a tar.gz, upload it, and on decompression the sof...