13767 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-21765
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: use RCU protection in ip6defaultadvmss ip6defaultadvmss needs rcu protection to make sure the net structure it reads does not disappear. CVE-2025-21765 No...
Linux Distros Unpatched Vulnerability : CVE-2025-25472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service DoS via a crafted DCM file. CVE-2025-25472 Note that Nessus reli...
Linux Distros Unpatched Vulnerability : CVE-2024-50243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in runismappedfull Fixed deleating of a non-resident...
Mozilla Thunderbird ESR Out-of-Bounds Access Vulnerability (mfsa_2025-18) - Windows
Mozilla Thunderbird ESR is prone to an out-of-bounds access vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Debian: Security Advisory (DSA-5874-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2025-25208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - RHCL: Authorino Denial of Service Through AuthPolicy With sharedSecretRef Severity CVE-2025-25208 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2025-25207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - RHCL: AuthPolicy Callbacks Result in Denial of Service in Authorino Severity CVE-2025-25207 Note that Nessus relies on the presence o...
Linux Distros Unpatched Vulnerability : CVE-2025-0998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM...
Linux Distros Unpatched Vulnerability : CVE-2024-50612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read. CVE-2024-50612 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2024-7965
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2024-56827
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress...
Linux Distros Unpatched Vulnerability : CVE-2018-11033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service application crash o...
Linux Distros Unpatched Vulnerability : CVE-2024-4949
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2025-0239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability was fixed in...
Linux Distros Unpatched Vulnerability : CVE-2024-51774
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors. CVE-2024-51774 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2024-56727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2flows.c Adding error pointer check after...
Linux Distros Unpatched Vulnerability : CVE-2024-5499
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2025-22865
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed. CVE-2025-22865 Note that...
Linux Distros Unpatched Vulnerability : CVE-2024-49890
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pm: ensure the fwinfo is not null before using it This resolves the dereference null return value warning reported by Coverity. CVE-2024-49890 Note that...
Linux Distros Unpatched Vulnerability : CVE-2025-26594
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, th...