Linux Distros Unpatched Vulnerability : CVE-2022-49630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: Fix a data-race around sysctltcpecnfallback. While reading sysctltcpecnfallback, it can be changed concurrently. Thus, we need to add READONCE to its reade...

Linux Distros Unpatched Vulnerability : CVE-2022-49620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tipc: fix possible refcount leak in tipcskcreate Free sk in case tipcskinsert fails. CVE-2022-49620 Note that Nessus relies on the presence of the package ...

Linux Distros Unpatched Vulnerability : CVE-2024-27065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping...

Linux Distros Unpatched Vulnerability : CVE-2021-40926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via...

Linux Distros Unpatched Vulnerability : CVE-2024-33663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217. CVE-2024-33663 Note that...

Linux Distros Unpatched Vulnerability : CVE-2024-36621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds th...

Linux Distros Unpatched Vulnerability : CVE-2023-36377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll...

Linux Distros Unpatched Vulnerability : CVE-2024-4331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM...

Linux Distros Unpatched Vulnerability : CVE-2022-49629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix data-races around nexthopcompatmode. While reading nexthopcompatmode, it can be...

Linux Distros Unpatched Vulnerability : CVE-2022-49633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctlicmpechoenableprobe. While reading...

Linux Distros Unpatched Vulnerability : CVE-2022-22826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nextScaffoldPart in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. CVE-2022-22826 Note that Nessus relies on the presence of the package...

Linux Distros Unpatched Vulnerability : CVE-2022-35737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. CVE-2022-357...

Linux Distros Unpatched Vulnerability : CVE-2024-30916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service DoS and obtain sensitive information via a...

Linux Distros Unpatched Vulnerability : CVE-2024-11116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures t...

Linux Distros Unpatched Vulnerability : CVE-2024-21783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow for some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local...

Linux Distros Unpatched Vulnerability : CVE-2024-2173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2021-32078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value...

Linux Distros Unpatched Vulnerability : CVE-2024-41989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when give...

Linux Distros Unpatched Vulnerability : CVE-2022-0613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8. CVE-2022-0613 Note that Nessus relies on the presence of the package as reported ...

Linux Distros Unpatched Vulnerability : CVE-2023-43373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the nutenteagg parameter at /hoteldruid/interconnessioni.php. CVE-2023-43373 Note...