11326 matches found
Linux Distros Unpatched Vulnerability : CVE-2011-1095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locale/programs/locale.c in locale in the GNU C Library aka glibc or libc6 before 2.13 does not quote its output, which might allow local users to gain privileg...
Linux Distros Unpatched Vulnerability : CVE-2007-2348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands vi...
Linux Distros Unpatched Vulnerability : CVE-2006-7243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe...
Linux Distros Unpatched Vulnerability : CVE-2011-0482
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which...
Linux Distros Unpatched Vulnerability : CVE-2008-4311
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default configuration of system.conf in D-Bus aka DBus before 1.2.6 omits the sendtype attribute in certain rules, which allows local users to bypass intend...
Linux Distros Unpatched Vulnerability : CVE-2011-3557
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.233...
Linux Distros Unpatched Vulnerability : CVE-2010-1167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attacke...
Linux Distros Unpatched Vulnerability : CVE-2010-0407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple buffer overflows in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 allow...
Linux Distros Unpatched Vulnerability : CVE-2011-1080
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The doreplace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character...
Linux Distros Unpatched Vulnerability : CVE-2011-3000
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple...
Linux Distros Unpatched Vulnerability : CVE-2010-2252
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote...
Linux Distros Unpatched Vulnerability : CVE-2009-3766
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - muttssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name CN field of an X.5...
Linux Distros Unpatched Vulnerability : CVE-2011-1658
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which mig...
Linux Distros Unpatched Vulnerability : CVE-2011-1479
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service system crash via vectors...
Linux Distros Unpatched Vulnerability : CVE-2011-0764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which...
Linux Distros Unpatched Vulnerability : CVE-2010-3702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other...
Linux Distros Unpatched Vulnerability : CVE-2011-3191
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of servic...
Azure Linux 3.0 Security Update: expat / python3 (CVE-2024-28757)
The version of expat / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28757 advisory. - libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external...
Amazon Linux 2 : kernel (ALAS-2025-2759)
The version of kernel installed on the remote host is prior to 4.14.355-275.591. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2759 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR metho...
Atlassian Jira Service Management Data Center and Server 10.3.1 (JSDSERVER-15978)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-15978 advisory. - The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerabl...