4976 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-11310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readuserchunkcallback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 beta has memory leak vulnerabilities via crafted PNG files...
Linux Distros Unpatched Vulnerability : CVE-2016-7530
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by- zero error or out-of-bounds write via a crafted file...
Linux Distros Unpatched Vulnerability : CVE-2014-5209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Information Disclosure vulnerability exists in NTP 4.2.7p25 private mode 6/7 messages via a GETRESTRICT control message, which could let a malicious user...
Linux Distros Unpatched Vulnerability : CVE-2017-12663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c. CVE-2017-12663 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2017-11450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via...
Linux Distros Unpatched Vulnerability : CVE-2016-7056
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys. CVE-2016-70...
Linux Distros Unpatched Vulnerability : CVE-2017-5484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sigprint. CVE-2017-5484 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2018-8740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and...
Linux Distros Unpatched Vulnerability : CVE-2021-25292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack via a crafted PDF file because of a catastrophic...
Linux Distros Unpatched Vulnerability : CVE-2016-6811
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. CVE-2016-6811 Note that Nessus relies ...
Linux Distros Unpatched Vulnerability : CVE-2017-14503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libarchive 3.3.2 suffers from an out-of-bounds read within lhareaddatanone in archivereadsupportformatlha.c when extracting a specially crafted lha archive,...
Linux Distros Unpatched Vulnerability : CVE-2020-12390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox 76. CVE-2020-12390 Note...
Linux Distros Unpatched Vulnerability : CVE-2016-5629
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via...
Linux Distros Unpatched Vulnerability : CVE-2020-18774
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A float point exception in the printLong function in tagsint.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...
Linux Distros Unpatched Vulnerability : CVE-2014-8178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for...
Linux Distros Unpatched Vulnerability : CVE-2017-12901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint. CVE-2017-12901 Note that Nessus relies on the presence of the packa...
Linux Distros Unpatched Vulnerability : CVE-2017-9170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- bmp.c:370:25. CVE-2017-9170 Note that Nessus relies on t...
Linux Distros Unpatched Vulnerability : CVE-2017-11573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName parsettf.c resulting in DoS or code execution via a crafted otf file...
Linux Distros Unpatched Vulnerability : CVE-2012-0075
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknow...
Linux Distros Unpatched Vulnerability : CVE-2020-28097
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgaconscrolldelta out-of-bounds read, aka CID-973c096f6a85...