13770 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-30500
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Null pointer dereference was found in upx PackLinuxElf::canUnpack in plxelf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a...
Linux Distros Unpatched Vulnerability : CVE-2015-3148
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a...
Linux Distros Unpatched Vulnerability : CVE-2017-17084
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARPMPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a...
Linux Distros Unpatched Vulnerability : CVE-2020-14195
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to...
Linux Distros Unpatched Vulnerability : CVE-2015-3255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain...
Linux Distros Unpatched Vulnerability : CVE-2015-4815
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors...
Linux Distros Unpatched Vulnerability : CVE-2017-12587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c. CVE-2017-12587 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2018-1061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.ISLINEJUNK method. An attacker coul...
Linux Distros Unpatched Vulnerability : CVE-2017-6951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The keyringsearchaux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service NULL pointer...
Linux Distros Unpatched Vulnerability : CVE-2016-2523
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dnp3alprocessobject function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote...
Linux Distros Unpatched Vulnerability : CVE-2017-9405
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-9405 Not...
Linux Distros Unpatched Vulnerability : CVE-2017-15642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file. CVE-2017-15642...
Linux Distros Unpatched Vulnerability : CVE-2017-11505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service large...
Linux Distros Unpatched Vulnerability : CVE-2017-16910
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error within the LibRaw::xtransinterpolate function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read...
Linux Distros Unpatched Vulnerability : CVE-2019-10899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a...
Linux Distros Unpatched Vulnerability : CVE-2017-13019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint. CVE-2017-13019 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2017-6892
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libsndfile version 1.0.28, an error in the aiffreadchanmap function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially...
Linux Distros Unpatched Vulnerability : CVE-2017-13733
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...
Linux Distros Unpatched Vulnerability : CVE-2012-5564
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - android-tools 4.1.1 in Android Debug Bridge ADB allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log. CVE-2012-5564 Note that...
Linux Distros Unpatched Vulnerability : CVE-2019-16231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/net/fjes/fjesmain.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. CVE-2019-16231 Not...