14570 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-51887
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...
Linux Distros Unpatched Vulnerability : CVE-2024-40794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing ta...
Linux Distros Unpatched Vulnerability : CVE-2022-40982
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may allow an...
Linux Distros Unpatched Vulnerability : CVE-2020-6809
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same- origin', it was possible for the Web Extension to read local...
Linux Distros Unpatched Vulnerability : CVE-2023-48013
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gffilterpacketdel function at /gpac/src/filtercore/filter.c. CVE-2023-480...
Linux Distros Unpatched Vulnerability : CVE-2022-30629
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Non-random values for ticketageadd in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correla...
Linux Distros Unpatched Vulnerability : CVE-2023-33285
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply...
Linux Distros Unpatched Vulnerability : CVE-2022-1071
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2. CVE-2022-1071 Note that Nessus relies on the presence of the package as reported by...
Mozilla Firefox Security Update (mfsa_2025-14) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Linux Distros Unpatched Vulnerability : CVE-2024-45490
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CVE-2024-45490 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2022-48340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dhtsetxattrmdscbk use- after-free. CVE-2022-48340 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2024-21823
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user...
Mozilla Thunderbird Security Update (mfsa_2025-17) - Mac OS X
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
Linux Distros Unpatched Vulnerability : CVE-2020-24025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path...
Linux Distros Unpatched Vulnerability : CVE-2024-21506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: Duplicate of CVE-2024-5629. CVE-2024-21506 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 8090...
Linux Distros Unpatched Vulnerability : CVE-2024-42156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or...
Linux Distros Unpatched Vulnerability : CVE-2021-33646
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The thread function doesn't free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak. CVE-2021-33646 Note that Nessus relies o...
Linux Distros Unpatched Vulnerability : CVE-2022-1328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line CVE-2022-1328 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2022-1705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined...
Linux Distros Unpatched Vulnerability : CVE-2022-1962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply...