44 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-41683
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0 CVE-2021-41683 Note that Nessus relies on the presence of the package ...
Linux Distros Unpatched Vulnerability : CVE-2019-10178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that the Token Processing Service TPS did not properly sanitize the Token IDs from the Activity page, enabling a Stored Cross Site Scripting XSS...
Linux Distros Unpatched Vulnerability : CVE-2023-26302
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as...
Linux Distros Unpatched Vulnerability : CVE-2021-4188
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mruby is vulnerable to NULL Pointer Dereference CVE-2021-4188 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...
Linux Distros Unpatched Vulnerability : CVE-2024-53184
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the ubd instance. Otherwise, removing a ubd...
Linux Distros Unpatched Vulnerability : CVE-2018-7455
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as...
Linux Distros Unpatched Vulnerability : CVE-2022-1796
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in GitHub repository vim/vim prior to 8.2.4979. CVE-2022-1796 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2021-44732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtlssslsetsession failure. CVE-2021-44732 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2020-36310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a setmemoryregiontest infinite loop for certain nested page faults, aka...
Linux Distros Unpatched Vulnerability : CVE-2022-49711
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbusremove In fslmcbusremove, mc-rootmcbusdev-mcio is passed to fsldestroymcio. However, mc-rootmcbusdev is...
Linux Distros Unpatched Vulnerability : CVE-2014-9807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pdb coder in ImageMagick allows remote attackers to cause a denial of service double free via unspecified vectors. CVE-2014-9807 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2015-2330
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies...
Linux Distros Unpatched Vulnerability : CVE-2013-1677
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17....
Linux Distros Unpatched Vulnerability : CVE-2017-14503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive,...
Linux Distros Unpatched Vulnerability : CVE-2016-10729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The runtar setuid root binary does not...
Linux Distros Unpatched Vulnerability : CVE-2018-5380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Quagga BGP daemon bgpd prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input...
Linux Distros Unpatched Vulnerability : CVE-2017-13016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint. CVE-2017-13016 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2016-4956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet...
Linux Distros Unpatched Vulnerability : CVE-2019-7574
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMAADPCMdecode in audio/SDLwave.c. CVE-2019-7574 Note tha...
CVE-2020-11967
CVE-2020-11967 affects IQrouter firmware up to v3.3.1. The vulnerability is caused by Incorrect Access Control, enabling remote attackers to take full device control (e.g., restart network, reboot, upgrade, reset) without authentication. Documentation consistently notes this risk is most relevant...