Linux Distros Unpatched Vulnerability : CVE-2020-1941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue. CVE-2020-1941 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2022-30688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored,...

Linux Distros Unpatched Vulnerability : CVE-2020-35653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer...

Linux Distros Unpatched Vulnerability : CVE-2020-28367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a...

Linux Distros Unpatched Vulnerability : CVE-2017-5076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote...

Linux Distros Unpatched Vulnerability : CVE-2021-22239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later. CVE-2021-22239 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2023-5616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for...

Linux Distros Unpatched Vulnerability : CVE-2025-6593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects MediaWiki: from...

Linux Distros Unpatched Vulnerability : CVE-2022-29918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99. Some of these bugs showed...

Linux Distros Unpatched Vulnerability : CVE-2022-1789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - With shadow paging enabled, the INVPCID instruction results in a call to kvmmmuinvpcidgva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set...

Linux Distros Unpatched Vulnerability : CVE-2024-38585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc Pass userplen to memcpy instead of heap-len...

Linux Distros Unpatched Vulnerability : CVE-2020-15676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting...

Linux Distros Unpatched Vulnerability : CVE-2018-20796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by...

Linux Distros Unpatched Vulnerability : CVE-2021-47087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to the allocated pages struct page page has...

Linux Distros Unpatched Vulnerability : CVE-2023-49558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c...

[SECURITY] [DLA 4266-1] distro-info-data database update

Debian LTS Advisory DLA-4266-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera August 09, 2025 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u9 This is a routine update of the distro-info-data database for Debian LTS users. It adds the...

Linux Distros Unpatched Vulnerability : CVE-2021-33054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the...

Linux Distros Unpatched Vulnerability : CVE-2020-36790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a memory leak We forgot to free newmodelnumber CVE-2020-36790 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2021-47442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFC: digital: fix possible memory leak in digitalinsendsddreq 'skb' is allocated in digitalinsendsddreq, but not free when digitalinsendcmd failed, which will...

MAL-2025-1348 Malicious code in deepcoin-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb83eff2eeb19ff872da9610ae40247140536ea979ba39b846c577ab024631 Any computer that has this package install...