2822 matches found
Linux Distros Unpatched Vulnerability : CVE-2012-1586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which...
Linux Distros Unpatched Vulnerability : CVE-2014-9845
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service crash via a corrupted dib file. CVE-2014-9845 Note...
Linux Distros Unpatched Vulnerability : CVE-2013-5661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cache Poisoning issue exists in DNS Response Rate Limiting. CVE-2013-5661 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2017-9186
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a cannot be represented in type int issue in input-bmp.c:326:17. CVE-2017-9186 Note that Nessus relies on the presence of...
Linux Distros Unpatched Vulnerability : CVE-2017-11568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines psread.c resulting in DoS or code execution via a crafted otf file...
Linux Distros Unpatched Vulnerability : CVE-2016-10745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. CVE-2016-10745 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2016-0616
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote...
Linux Distros Unpatched Vulnerability : CVE-2019-11034
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated...
Linux Distros Unpatched Vulnerability : CVE-2012-0039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLib 2.31.8 and earlier, when the gstrhash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which...
Linux Distros Unpatched Vulnerability : CVE-2018-18751
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read- catalog.c, related to an invalid free in pogramparse in...
Linux Distros Unpatched Vulnerability : CVE-2017-14041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write,...
Linux Distros Unpatched Vulnerability : CVE-2016-1838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS...
Linux Distros Unpatched Vulnerability : CVE-2018-11781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. CVE-2018-11781 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2016-1835
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remot...
Linux Distros Unpatched Vulnerability : CVE-2019-20161
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGFIPMPXWatermarkingInit in...
Linux Distros Unpatched Vulnerability : CVE-2015-4752
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors...
Linux Distros Unpatched Vulnerability : CVE-2019-8331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. CVE-2019-8331 Note that Nessus relies on th...
Linux Distros Unpatched Vulnerability : CVE-2018-19200
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri function. CVE-2018-19200 Note that...
Linux Distros Unpatched Vulnerability : CVE-2014-0223
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the qcowopen function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service crash and possibly execute...
Linux Distros Unpatched Vulnerability : CVE-2019-8980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak in the kernelreadfile function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service memory consumption b...