Linux Distros Unpatched Vulnerability : CVE-2023-31611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the libclongjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

Linux Distros Unpatched Vulnerability : CVE-2024-30204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. CVE-2024-30204 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2022-27664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdo...

Linux Distros Unpatched Vulnerability : CVE-2024-46855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftsocket: fix sk refcount leaks We must put 'sk' reference before returning. CVE-2024-46855 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2024-27834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvO...

Linux Distros Unpatched Vulnerability : CVE-2022-28948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input. CVE-2022-28948 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2022-2589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3. CVE-2022-2589 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2022-1921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution...

Linux Distros Unpatched Vulnerability : CVE-2022-26564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting XSS vulnerability via the prezzoperiodo4 parameter in creaprezzi.php. CVE-2022-26564...

Linux Distros Unpatched Vulnerability : CVE-2021-44732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtlssslsetsession failure. CVE-2021-44732 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2021-33362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack buffer overflow in the hevcparsevpsextension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via ...

Linux Distros Unpatched Vulnerability : CVE-2024-43796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute...

Linux Distros Unpatched Vulnerability : CVE-2022-2523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2. CVE-2022-2523 Note that Nessus relies on the presence of the package a...

Linux Distros Unpatched Vulnerability : CVE-2024-32620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...

Linux Distros Unpatched Vulnerability : CVE-2024-28030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL pointer dereference in some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial of service via local...

Linux Distros Unpatched Vulnerability : CVE-2024-0641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability was found in tipccryptokeyrevoke in net/tipc/crypto.c in the Linux kernel's TIPC subsystem. This flaw allows guests with local...

Linux Distros Unpatched Vulnerability : CVE-2024-39468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2findsmbtcon Unlock cifstcpseslock before calling...

Linux Distros Unpatched Vulnerability : CVE-2022-37047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getipv6next at common/get.c:713. NOTE: this is different...

Linux Distros Unpatched Vulnerability : CVE-2024-0808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2023-42365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function. CVE-2023-42365 Note that Nessus relie...