Linux Distros Unpatched Vulnerability : CVE-2022-49711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbusremove In fslmcbusremove, mc-rootmcbusdev-mcio is passed to fsldestroymcio. However, mc-rootmcbusdev is...

Linux Distros Unpatched Vulnerability : CVE-2014-9807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pdb coder in ImageMagick allows remote attackers to cause a denial of service double free via unspecified vectors. CVE-2014-9807 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2012-0880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table...

Linux Distros Unpatched Vulnerability : CVE-2015-2330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies...

Linux Distros Unpatched Vulnerability : CVE-2016-10729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The runtar setuid root binary does not...

Linux Distros Unpatched Vulnerability : CVE-2017-14503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive,...

Linux Distros Unpatched Vulnerability : CVE-2013-1677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17....

Linux Distros Unpatched Vulnerability : CVE-2018-5380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Quagga BGP daemon bgpd prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input...

Linux Distros Unpatched Vulnerability : CVE-2016-4956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet...

Linux Distros Unpatched Vulnerability : CVE-2019-7574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMAADPCMdecode in audio/SDLwave.c. CVE-2019-7574 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2017-13016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint. CVE-2017-13016 Note that Nessus relies on the presence of the...

CVE-2024-10383

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

CVE-2025-1072

A Denial of Service DoS issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2. A denial of service could occur upon importing maliciously crafted content using the Fogbugz importer...

CVE-2025-0290

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: q, traefik-fips, frp, buf, spegel, traefik, eks-distro, eks-distro-fips, k3s, cloudflared, kubernetes-dns-node-cache, caddy-fips, kubernetes-dns-node-cache-fips, caddy...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: q, traefik-fips, frp, buf, spegel, traefik, eks-distro, eks-distro-fips, k3s, cloudflared, kubernetes-dns-node-cache, caddy-fips, kubernetes-dns-node-cache-fips, caddy...

CVE-2024-51744 vulnerabilities

Vulnerabilities for packages: argo-workflows, kaniko, gitea, etcd, flux-source-controller, neuvector-fips, temporal, aactl, policy-controller, zot, flux-image-reflector-controller, boring-registry-fips, policy-controller-fips, trivy-fips, chartmuseum-fips, octo-sts, crossplane, openbao, trivy,...

[SECURITY] [DLA 3935-1] distro-info-data database update

Debian LTS Advisory DLA-3935-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 24, 2024 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u7 This is a routine update of the distro-info-data database for Debian LTS users. It adds...

Debian dla-3935 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3935 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3935-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3935-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...