17501 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-6254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server response...
Linux Distros Unpatched Vulnerability : CVE-2020-7995
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts. CVE-2020-7995 Note that Nessus reli...
Linux Distros Unpatched Vulnerability : CVE-2017-0541
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media...
Linux Distros Unpatched Vulnerability : CVE-2021-24025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to incorrect string size calculations inside the pregquote function, a large input string passed to the function can trigger an integer overflow leading to ...
Linux Distros Unpatched Vulnerability : CVE-2022-31175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages in versions...
Linux Distros Unpatched Vulnerability : CVE-2015-5814
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2020-13094
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr before 11.0.4 allows XSS. CVE-2020-13094 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...
Linux Distros Unpatched Vulnerability : CVE-2023-38059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload. This can be used to retreive the I...
Linux Distros Unpatched Vulnerability : CVE-2021-20109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset...
Linux Distros Unpatched Vulnerability : CVE-2018-15871
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a...
Linux Distros Unpatched Vulnerability : CVE-2022-0224
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command CVE-2022-0224 Note that Nessus relies on the presence of the packag...
Linux Distros Unpatched Vulnerability : CVE-2016-6874
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The arrayrecursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion. CVE-2016-6874...
Linux Distros Unpatched Vulnerability : CVE-2019-16676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plataformatec Simple Form has Incorrect Access Control in filemethod? in lib/simpleform/formbuilder.rb, because a user-supplied string is invoked as a method...
Linux Distros Unpatched Vulnerability : CVE-2022-35106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksumunsigned char, int at /xpdf/FoFiTrueType.cc...
Linux Distros Unpatched Vulnerability : CVE-2024-37676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the HeaderpopulateFromSettings function. CVE-2024-37676 Note that...
Linux Distros Unpatched Vulnerability : CVE-2022-40439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An memory leak issue was discovered in AP4StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2024-3367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc CVE-2024-33...
Linux Distros Unpatched Vulnerability : CVE-2017-14681
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The daemon in P3Scan 3.0rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitra...
Linux Distros Unpatched Vulnerability : CVE-2016-3844
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517...
Linux Distros Unpatched Vulnerability : CVE-2025-53865
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive. CVE-2025-53865 Note that Nessus relies on...