17501 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-32477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability site...
Linux Distros Unpatched Vulnerability : CVE-2025-26305
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via ...
Linux Distros Unpatched Vulnerability : CVE-2022-35081
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngreadheader at /src/png2swf.c. CVE-2022-35081 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2010-3821
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter...
Linux Distros Unpatched Vulnerability : CVE-2021-30147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php. CVE-2021-30147 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-12098
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable cross site scripting XSS vulnerability exists in the add filter functionality of the railsadmin rails gem version 1.2.0. A specially crafted URL...
Linux Distros Unpatched Vulnerability : CVE-2017-0338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the...
Linux Distros Unpatched Vulnerability : CVE-2019-3558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send shor...
Linux Distros Unpatched Vulnerability : CVE-2023-31910
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component parserparsefunctionstatement at...
Linux Distros Unpatched Vulnerability : CVE-2011-2829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified othe...
Linux Distros Unpatched Vulnerability : CVE-2019-12175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a...
Linux Distros Unpatched Vulnerability : CVE-2017-0483
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated ...
Linux Distros Unpatched Vulnerability : CVE-2020-18185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment. CVE-2020-18185 Note th...
Linux Distros Unpatched Vulnerability : CVE-2021-38172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7. CVE-2021-38172 Note that Nessus relies on the presence of the packa...
Linux Distros Unpatched Vulnerability : CVE-2021-40049
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being...
Linux Distros Unpatched Vulnerability : CVE-2016-4758
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows...
Linux Distros Unpatched Vulnerability : CVE-2018-13448
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid...
Linux Distros Unpatched Vulnerability : CVE-2015-5806
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...
Linux Distros Unpatched Vulnerability : CVE-2022-40438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function AP4MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a...
Linux Distros Unpatched Vulnerability : CVE-2023-45818
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyMCE is an open source rich text editor. A mutation cross-site scripting mXSS vulnerability was discovered in TinyMCE's core undo and redo functionality. Whe...