2291 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-28070
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0. CVE-2022-28070 Note that Nessus relies on the presence of the package as reported b...
Linux Distros Unpatched Vulnerability : CVE-2019-15486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline. CVE-2019-15486 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2018-17076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a...
Linux Distros Unpatched Vulnerability : CVE-2021-22251
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain tha...
Linux Distros Unpatched Vulnerability : CVE-2019-25104
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the function AICastScriptLoad of the file...
Linux Distros Unpatched Vulnerability : CVE-2017-15698
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle field...
Linux Distros Unpatched Vulnerability : CVE-2021-30954
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2...
Linux Distros Unpatched Vulnerability : CVE-2021-46051
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the MediaIsSelfContained function, which could cause a Denial of Service. . CVE-2021-46051 Note tha...
Linux Distros Unpatched Vulnerability : CVE-2022-42863
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS...
Linux Distros Unpatched Vulnerability : CVE-2023-48052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
Linux Distros Unpatched Vulnerability : CVE-2020-16124
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics roscomm communications packages allows unauthenticated network traffic to...
Linux Distros Unpatched Vulnerability : CVE-2022-26357
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a...
Linux Distros Unpatched Vulnerability : CVE-2022-28890
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 a...
Linux Distros Unpatched Vulnerability : CVE-2023-40660
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operation...
Linux Distros Unpatched Vulnerability : CVE-2019-14734
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load in mtk.cpp. CVE-2019-14734 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2020-35450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls. CVE-2020-35450 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2025-2760
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
Linux Distros Unpatched Vulnerability : CVE-2021-36769
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the serv...
Linux Distros Unpatched Vulnerability : CVE-2020-35711
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with...
Linux Distros Unpatched Vulnerability : CVE-2020-10087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the...