Linux Distros Unpatched Vulnerability : CVE-2022-25235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

Linux Distros Unpatched Vulnerability : CVE-2023-31617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the dksetdelete component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

Linux Distros Unpatched Vulnerability : CVE-2024-36615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side...

Linux Distros Unpatched Vulnerability : CVE-2024-45338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This...

Linux Distros Unpatched Vulnerability : CVE-2021-31525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service panic via a large header to ReadRequest or...

Linux Distros Unpatched Vulnerability : CVE-2024-47093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS CVE-2024-47093 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2022-27239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root...

Linux Distros Unpatched Vulnerability : CVE-2021-33098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of...

Linux Distros Unpatched Vulnerability : CVE-2023-34408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DokuWiki before 2023-04-04a allows XSS via RSS titles. CVE-2023-34408 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2024-46805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix the waring dereferencing hive Check the amdgpuhiveinfo hive that maybe is NULL. CVE-2024-46805 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2023-39327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the...

Linux Distros Unpatched Vulnerability : CVE-2022-49601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp/dccp: Fix a data-race around sysctltcpfwmarkaccept. While reading sysctltcpfwmarkaccept, it can be changed concurrently. Thus, we need to add READONCE to it...

Linux Distros Unpatched Vulnerability : CVE-2023-5377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV. CVE-2023-5377 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-33987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket. CVE-2022-33987 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2023-32611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial ...

Linux Distros Unpatched Vulnerability : CVE-2022-22824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. CVE-2022-22824 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2023-40827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter...

Linux Distros Unpatched Vulnerability : CVE-2023-41361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version. CVE-2023-41361 Note that...

Linux Distros Unpatched Vulnerability : CVE-2023-49990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. CVE-2023-49990 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-33874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c. CVE-2024-33874 Note that Nessus relies on the presence of the package...