Linux Distros Unpatched Vulnerability : CVE-2023-37766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so. CVE-2023-3776...

Linux Distros Unpatched Vulnerability : CVE-2022-41727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of...

Linux Distros Unpatched Vulnerability : CVE-2022-49597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: Fix data-races around sysctltcpbasemss. While reading sysctltcpbasemss, it can be changed concurrently. Thus, we need to add READONCE to its readers...

Linux Distros Unpatched Vulnerability : CVE-2022-35014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Advancecomp v2.3 contains a segmentation fault. CVE-2022-35014 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

Linux Distros Unpatched Vulnerability : CVE-2024-45508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

Linux Distros Unpatched Vulnerability : CVE-2024-35866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsdumpfullkey Skip sessions that are being teared down...

Linux Distros Unpatched Vulnerability : CVE-2024-0811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension...

Linux Distros Unpatched Vulnerability : CVE-2021-47420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a potential ttm-sg memory leak Memory is allocated for ttm-sg by kmalloc in...

Linux Distros Unpatched Vulnerability : CVE-2022-48783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiqgswip: fix use after free in gswipremove...

Linux Distros Unpatched Vulnerability : CVE-2022-22822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. CVE-2022-22822 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2024-46751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: don't BUGON when 0 reference count at btrfslookupextentinfo Instead of doing a BUGON handle the error by returning -EUCLEAN, aborting the transaction and...

Linux Distros Unpatched Vulnerability : CVE-2024-10006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in Consul and Consul Enterprise Consul such that using Headers in L7 traffic intentions could bypass HTTP header based access...

Linux Distros Unpatched Vulnerability : CVE-2023-4735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. CVE-2023-4735 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2024-36460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text. CVE-2024-36460 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2022-38856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain The MPlayer Project products are vulnerable to Buffer Overflow via function movbuildindex of libmpdemux/demuxmov.c. This affects mplayer SVN-r38374-13.0...

Linux Distros Unpatched Vulnerability : CVE-2022-48285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive. CVE-2022-48285 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2022-49331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously allocated memory. Add devmkfree to those failure paths...

Linux Distros Unpatched Vulnerability : CVE-2022-45907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. CVE-2022-45907 Note that...

Linux Distros Unpatched Vulnerability : CVE-2021-39371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An XML external entity XXE injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the...

Linux Distros Unpatched Vulnerability : CVE-2021-37833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A reflected cross-site scripting XSS vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution ...