Linux Distros Unpatched Vulnerability : CVE-2021-38380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack- based buffer over-read. An attacker can leverage this t...

Linux Distros Unpatched Vulnerability : CVE-2018-19994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via...

Linux Distros Unpatched Vulnerability : CVE-2021-36401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk. CVE-2021-36401 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2021-32474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site...

Linux Distros Unpatched Vulnerability : CVE-2018-7867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead ...

Linux Distros Unpatched Vulnerability : CVE-2021-39577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function main located in swfdump.c. It allows an attacker to cause co...

Linux Distros Unpatched Vulnerability : CVE-2011-3022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - translate/translatemanager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allow...

Linux Distros Unpatched Vulnerability : CVE-2022-32739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...

Linux Distros Unpatched Vulnerability : CVE-2022-6083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - freeciv modpack installer buffer overflow CVE-2022-6083 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2017-12475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AP4Processor::Process function in Core/Ap4Processor.cpp in Bento4 mp4encrypt before 1.5.0-616 allows remote attackers to cause a denial of service NULL...

Linux Distros Unpatched Vulnerability : CVE-2020-9794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS...

Linux Distros Unpatched Vulnerability : CVE-2018-10095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to...

Linux Distros Unpatched Vulnerability : CVE-2022-28654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isclosingsession allows users to fill up apport.log CVE-2022-28654 - isclosingsession allows users to fill up apport.log. CVE-2022-28654 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2018-20591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults,...

Linux Distros Unpatched Vulnerability : CVE-2016-2418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, which allows attackers to obtain...

Linux Distros Unpatched Vulnerability : CVE-2016-7102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a special path in the C: drive...

Linux Distros Unpatched Vulnerability : CVE-2024-29489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype. CVE-2024-29489 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2024-28830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p7, 2.2.0p28, 2.1.0p45 and =2.0.0p39 EOL causes automation user secrets...

Linux Distros Unpatched Vulnerability : CVE-2021-31738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS. CVE-2021-31738 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-4104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-service...