28974 matches found
Linux Distros Unpatched Vulnerability : CVE-2013-6640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DehoistArrayIndex function in hydrogen-dehoist.cc aka hydrogen.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote...
Linux Distros Unpatched Vulnerability : CVE-2017-15390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a...
Linux Distros Unpatched Vulnerability : CVE-2022-3123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site Scripting XSS - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a. CVE-2022-3123 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2018-6069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2015-4906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a...
Linux Distros Unpatched Vulnerability : CVE-2020-11866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libEMF aka ECMA-234 Metafile Library through 1.0.11 allows a use-after-free. CVE-2020-11866 Note that Nessus relies on the presence of the package as reported b...
Linux Distros Unpatched Vulnerability : CVE-2020-8563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controll...
Linux Distros Unpatched Vulnerability : CVE-2021-27737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin. CVE-2021-27737 Note that Nessus relies on the presence of th...
Linux Distros Unpatched Vulnerability : CVE-2021-4238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always...
Linux Distros Unpatched Vulnerability : CVE-2020-7608
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yargs-parser could be tricked into adding or modifying properties of Object.prototype using a proto payload. CVE-2020-7608 Note that Nessus relies on the presen...
Linux Distros Unpatched Vulnerability : CVE-2020-13822
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could...
Linux Distros Unpatched Vulnerability : CVE-2025-38434
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Revert riscv: Define TASKSIZEMAX for accessok This reverts commit ad5643cf2f69 riscv: Define...
Linux Distros Unpatched Vulnerability : CVE-2015-4916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different...
Linux Distros Unpatched Vulnerability : CVE-2019-6283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp. CVE-2019-6283 Note that Nessus relies on the presence...
Linux Distros Unpatched Vulnerability : CVE-2022-50237
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation fo...
Linux Distros Unpatched Vulnerability : CVE-2018-14521
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc. CVE-2018-145...
Linux Distros Unpatched Vulnerability : CVE-2022-42966
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the...
Linux Distros Unpatched Vulnerability : CVE-2015-4862
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to DML...
Linux Distros Unpatched Vulnerability : CVE-2023-3920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions...
Linux Distros Unpatched Vulnerability : CVE-2020-7676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping elements in...