Linux Distros Unpatched Vulnerability : CVE-2014-5030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on 1 index.html, 2 index.class, 3 index.pl, 4 index.php, 5 index.pyc, or 6...

Linux Distros Unpatched Vulnerability : CVE-2014-1932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 loaddjpeg function in JpegImagePlugin.py, 2 Ghostscript function in EpsImagePlugin.py, 3 load function in IptcImagePlugin.py, and 4 copy function in...

Linux Distros Unpatched Vulnerability : CVE-2012-3504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the list file in the...

Linux Distros Unpatched Vulnerability : CVE-2014-3422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under...

Linux Distros Unpatched Vulnerability : CVE-2016-10374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and...

Linux Distros Unpatched Vulnerability : CVE-2013-4392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on...

Linux Distros Unpatched Vulnerability : CVE-2014-9512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. CVE-2014-9512 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2014-2524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rltropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a...

Linux Distros Unpatched Vulnerability : CVE-2015-5700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. CVE-2015-5700 Note th...

Linux Distros Unpatched Vulnerability : CVE-2015-5701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this...

Linux Distros Unpatched Vulnerability : CVE-2021-20197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these...

Linux Distros Unpatched Vulnerability : CVE-2018-6198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - w3m through 0.5.3 does not properly handle temporary files when the /.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to...

Linux Distros Unpatched Vulnerability : CVE-2015-3156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in...

Linux Distros Unpatched Vulnerability : CVE-2012-4454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1...

Linux Distros Unpatched Vulnerability : CVE-2014-1933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files...

Linux Distros Unpatched Vulnerability : CVE-2013-4277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a...

Linux Distros Unpatched Vulnerability : CVE-2012-1088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2...

CVE-2025-0684 Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesyste...

Linux Distros Unpatched Vulnerability : CVE-2010-2024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files,...

Linux Distros Unpatched Vulnerability : CVE-2010-3879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink...