Linux Distros Unpatched Vulnerability : CVE-2014-1858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - init.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file. CVE-2014-1858 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2015-8853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2019-8343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c. CVE-2019-8343 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2017-10971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack...

Linux Distros Unpatched Vulnerability : CVE-2016-9401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. CVE-2016-9401 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2019-8766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing...

Linux Distros Unpatched Vulnerability : CVE-2019-8559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes...

Linux Distros Unpatched Vulnerability : CVE-2014-9939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. CVE-2014-9939 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2015-1380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service abort via a crafted chunk-encoded body. CVE-2015-1380 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2018-19131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors. CVE-2018-19131 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2018-7225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to...

Linux Distros Unpatched Vulnerability : CVE-2015-8903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a...

Linux Distros Unpatched Vulnerability : CVE-2016-1286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit via a...

Linux Distros Unpatched Vulnerability : CVE-2017-1000481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'camefrom' parameter set to the previous url. After you login...

Linux Distros Unpatched Vulnerability : CVE-2017-17810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Netwide Assembler NASM 2.14rc0, there is a SEGV on unknown address that will cause a remote denial of service attack, because asm/preproc.c mishandles macro...

Linux Distros Unpatched Vulnerability : CVE-2016-6349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command...

Linux Distros Unpatched Vulnerability : CVE-2014-8080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service memory...

Linux Distros Unpatched Vulnerability : CVE-2017-9193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input- tga.c:538:33. CVE-2017-9193 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2017-5456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and...

Linux Distros Unpatched Vulnerability : CVE-2016-2781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters...