Linux Distros Unpatched Vulnerability : CVE-2022-0407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0407 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-49091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imx: Fix memory leak in imxpdconnectorgetmodes Avoid leaking the display mode variable i...

Linux Distros Unpatched Vulnerability : CVE-2022-49279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the len sizeofp operati...

Linux Distros Unpatched Vulnerability : CVE-2021-38166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucke...

Linux Distros Unpatched Vulnerability : CVE-2023-1436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads...

Linux Distros Unpatched Vulnerability : CVE-2023-36193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c. CVE-2023-36193 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2020-24394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.7.8, fs/nfsd/vfs.c in the NFS server can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support,...

Linux Distros Unpatched Vulnerability : CVE-2022-22909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid v3.0.3 was discovered to contain a remote code execution RCE vulnerability which is exploited via an attacker inserting a crafted payload into the na...

Linux Distros Unpatched Vulnerability : CVE-2022-48345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities. CVE-2022-48345 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2022-28048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac. CVE-2022-28048 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-52426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. CVE-2023-52426 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2022-45061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder,...

Linux Distros Unpatched Vulnerability : CVE-2022-0554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. CVE-2022-0554 Note that Nessus relies on the presence of the package as reported b...

Linux Distros Unpatched Vulnerability : CVE-2024-29166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 through 1.14.3 contains a buffer overflow in H5Olinfodecode, resulting in the corruption of the instruction pointer and causing denial of service or...

Linux Distros Unpatched Vulnerability : CVE-2022-24891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a...

Linux Distros Unpatched Vulnerability : CVE-2021-47213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2021-47213 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2022-1621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in vimstrncpy findword in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protectio...

Linux Distros Unpatched Vulnerability : CVE-2022-48806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX Commit effa453168a7 i2c: i801: Don't silently correct invalid transfer size revealed that ee1004eepromread d...

Linux Distros Unpatched Vulnerability : CVE-2024-46835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Fix smatch static checker warning adev-gfx.imu.funcs could be NULL CVE-2024-46835 Note that Nessus relies on the presence of the package as reported...

Linux Distros Unpatched Vulnerability : CVE-2022-3287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction,...