Linux Distros Unpatched Vulnerability : CVE-2018-17966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c. CVE-2018-17966 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2019-11721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as...

Linux Distros Unpatched Vulnerability : CVE-2016-7992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print- cip.c:cipifprint. CVE-2016-7992 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2017-9330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QEMU aka Quick Emulator before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service infinite loop by...

Linux Distros Unpatched Vulnerability : CVE-2019-9948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - urllib in Python 2.x through 2.7.16 supports the localfile: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist...

Linux Distros Unpatched Vulnerability : CVE-2014-1303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified...

Linux Distros Unpatched Vulnerability : CVE-2014-9841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to throwing of...

Linux Distros Unpatched Vulnerability : CVE-2014-9813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service application crash via a crafted viff file. CVE-2014-9813 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2015-8605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service application crash via an invalid lengt...

Linux Distros Unpatched Vulnerability : CVE-2013-0409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38...

Linux Distros Unpatched Vulnerability : CVE-2016-2779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffe...

Linux Distros Unpatched Vulnerability : CVE-2015-2643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via unknown...

Linux Distros Unpatched Vulnerability : CVE-2018-14470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2. CVE-2018-14470 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2016-8689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readHeader function in archivereadsupportformat7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service out-of-bounds read via multip...

Linux Distros Unpatched Vulnerability : CVE-2019-3874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2019-7548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled. CVE-2019-7548 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2018-18384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size...

Linux Distros Unpatched Vulnerability : CVE-2019-6462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, related to...

Linux Distros Unpatched Vulnerability : CVE-2018-5950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options...

Linux Distros Unpatched Vulnerability : CVE-2017-10685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ncurses 6.0, there is a format string vulnerability in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...