Linux Distros Unpatched Vulnerability : CVE-2017-8345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8345 Note that...

Linux Distros Unpatched Vulnerability : CVE-2016-7101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service out-of- bounds read via a large row value in an sgi file...

Linux Distros Unpatched Vulnerability : CVE-2018-8960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read...

Linux Distros Unpatched Vulnerability : CVE-2015-7553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlinklog module is loaded, allows local users t...

Linux Distros Unpatched Vulnerability : CVE-2013-7491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user- defined function requires a non-trivial amount of memory a...

Linux Distros Unpatched Vulnerability : CVE-2019-7576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c outside the wNumCoef loop...

Linux Distros Unpatched Vulnerability : CVE-2016-5039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The getattrvalue function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted object with all-bits...

Linux Distros Unpatched Vulnerability : CVE-2012-5488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject...

Linux Distros Unpatched Vulnerability : CVE-2018-14040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute. CVE-2018-14040 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2019-16233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/scsi/qla2xxx/qlaos.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. CVE-2019-16233 No...

Linux Distros Unpatched Vulnerability : CVE-2011-2199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option...

Linux Distros Unpatched Vulnerability : CVE-2006-0670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed...

Linux Distros Unpatched Vulnerability : CVE-2011-4028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a...

Linux Distros Unpatched Vulnerability : CVE-2008-3196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bound...

Opencart Multiple Vulnerabilities

Title: Opencart Multiple Vulnerabilities Vendor: http://www.opencart.com Vulnerabilities: Arbitrary File Upload, XSS, Path Disclosure Vulnerable Version: opencart 1.5.6 prior versions also may be affected Exploitation: Remote with browser Impact: High Vendor Supplied Patch: N/A Original Advisory...

WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)

WoltLab Burning Board = 2.3.1 PL2 - XSS Vulnerability Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 PL 2 Type: XSS Discovered by R and deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind of use. See 1...

[Full-disclosure] THai's Shoutbox XSS (Spoofing URL) BUG

-=--------------------ADVISORY-------------------=- -= =- -= THai's Shoutbox =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: THai's Shoutbox -=+ Version: not available -=+ Vendor's URL: not available -=+ Platform:...

IPSwitch IMail Advisory #2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory 6 PRODUCT IPSwitch IMail, All Current Versions VULNERABILITY the IMail Web Calendaring service, iwebcal, can be crashed by issuing a malformed POST request.. specifically one that neglects to include ...