27 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-0042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2. GitLab...
Linux Distros Unpatched Vulnerability : CVE-2021-45831
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via strlenavx2, which causes a Denial of Service. CVE-2021-45831 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2015-5179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeIPA might display user data improperly via vectors involving non-printable characters. CVE-2015-5179 Note that Nessus relies on the presence of the package ...
Linux Distros Unpatched Vulnerability : CVE-2017-0921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController...
Linux Distros Unpatched Vulnerability : CVE-2017-7018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected...
Linux Distros Unpatched Vulnerability : CVE-2023-6955
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to...
Linux Distros Unpatched Vulnerability : CVE-2018-6083
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access...
Linux Distros Unpatched Vulnerability : CVE-2020-35535
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibRaw, there is an out-of-bounds read vulnerability within the LibRaw::parseSonySRF function libraw\src\metadata\sony.cpp when processing srf files...
Linux Distros Unpatched Vulnerability : CVE-2017-16137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters ...
Linux Distros Unpatched Vulnerability : CVE-2017-5060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote...
Linux Distros Unpatched Vulnerability : CVE-2021-20190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from thi...
Linux Distros Unpatched Vulnerability : CVE-2018-6069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2020-7238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace such as a spaceTransfer-Encoding:chunked line and a later...
Linux Distros Unpatched Vulnerability : CVE-2019-17560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache NetBeans autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads...
Linux Distros Unpatched Vulnerability : CVE-2023-31418
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to ex...
Linux Distros Unpatched Vulnerability : CVE-2023-52991
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer in skbsegmentlist Commit 3a1296a38d0c net: Support GRO/GSO fraglist...
Linux Distros Unpatched Vulnerability : CVE-2018-6790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP...
Linux Distros Unpatched Vulnerability : CVE-2019-11750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox 69 and Firefox ESR 68.1...
Linux Distros Unpatched Vulnerability : CVE-2023-29141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted...
Linux Distros Unpatched Vulnerability : CVE-2022-31745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox 101. CVE-2022-317...