4402 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-10066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application...
Linux Distros Unpatched Vulnerability : CVE-2017-5456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and...
Linux Distros Unpatched Vulnerability : CVE-2015-8540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x...
Linux Distros Unpatched Vulnerability : CVE-2016-9262
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote...
Linux Distros Unpatched Vulnerability : CVE-2019-11472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error b...
Linux Distros Unpatched Vulnerability : CVE-2016-5440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and...
Linux Distros Unpatched Vulnerability : CVE-2017-1002102
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI...
Linux Distros Unpatched Vulnerability : CVE-2015-8382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The match function in pcreexec.c in PCRE before 8.37 mishandles the /?:abcd|?:?:?:?:abc|?:abcdefbabcdefghiabc|ACCEPT/ pattern and related patterns involving...
Linux Distros Unpatched Vulnerability : CVE-2014-9837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service crash via a crafted png file. CVE-2014-9837 Note that...
Linux Distros Unpatched Vulnerability : CVE-2015-0240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs ...
Linux Distros Unpatched Vulnerability : CVE-2017-1000481
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'camefrom' parameter set to the previous url. After you login...
Linux Distros Unpatched Vulnerability : CVE-2017-13017
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint. CVE-2017-13017 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2018-16643
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick...
Linux Distros Unpatched Vulnerability : CVE-2012-6708
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery before 1.9.0 is vulnerable to Cross-site Scripting XSS attacks. The jQuerystrInput function does not differentiate selectors from HTML in a reliable...
Linux Distros Unpatched Vulnerability : CVE-2012-0217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and...
Linux Distros Unpatched Vulnerability : CVE-2012-4025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the queueinit function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a...
Linux Distros Unpatched Vulnerability : CVE-2020-11023
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one ...
Linux Distros Unpatched Vulnerability : CVE-2011-1142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remo...
Malicious code in jaws-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef97004c02a81ddc0d6afb6b85005d92b395ba93911614fbabdd1ab2c1736de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in basic-data-router (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1226e5e77825d2e5d196dbb1155230067191bfad4c3777ba65b50ab5a95dc9e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...