Linux Distros Unpatched Vulnerability : CVE-2021-32420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. CVE-2021-32420 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2024-35365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

Linux Distros Unpatched Vulnerability : CVE-2024-0814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2021-32256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c. CVE-2021-32256...

Linux Distros Unpatched Vulnerability : CVE-2021-41803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim...

Linux Distros Unpatched Vulnerability : CVE-2024-3833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2022-0536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. CVE-2022-0536 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2023-1183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Libreoffice package. An attacker can craft an odb containing a database/script file with a SCRIPT command where the contents of the file...

Linux Distros Unpatched Vulnerability : CVE-2022-46329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local...

Linux Distros Unpatched Vulnerability : CVE-2023-31630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the sqloqueryspec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

Linux Distros Unpatched Vulnerability : CVE-2024-1060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2022-0566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of- bounds write of one byte when processing the message...

Linux Distros Unpatched Vulnerability : CVE-2024-3847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2020-7045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes. CVE-2020-7045 Not...

Linux Distros Unpatched Vulnerability : CVE-2023-40745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2021-45266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsrreadanimvaluesex function, which causes a segmentation fault and application crash...

Linux Distros Unpatched Vulnerability : CVE-2020-36557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition in the Linux kernel before 5.6.2 between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. CVE-2020-36557 Not...

Linux Distros Unpatched Vulnerability : CVE-2021-42373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given CVE-2021-42373 Note...

Linux Distros Unpatched Vulnerability : CVE-2024-23280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS...

Linux Distros Unpatched Vulnerability : CVE-2023-0614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to...