316 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-6113
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofin...
Linux Distros Unpatched Vulnerability : CVE-2022-28653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Users can consume unlimited disk space in /var/crash CVE-2022-28653 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2021-46837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - respjsipt38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to...
Linux Distros Unpatched Vulnerability : CVE-2024-11858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files...
Linux Distros Unpatched Vulnerability : CVE-2020-11979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them...
Linux Distros Unpatched Vulnerability : CVE-2018-6108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via ID...
Linux Distros Unpatched Vulnerability : CVE-2016-7550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote. CVE-2016-7550 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2018-6095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a...
Linux Distros Unpatched Vulnerability : CVE-2024-3864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enoug...
Linux Distros Unpatched Vulnerability : CVE-2025-54349
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow. CVE-2025-54349 Note that Nessus relies on the presence of...
Linux Distros Unpatched Vulnerability : CVE-2021-31878
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re-INVITE without SDP must be received after Asterisk has sent a BY...
Linux Distros Unpatched Vulnerability : CVE-2018-6106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object...
Linux Distros Unpatched Vulnerability : CVE-2019-10785
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to...
Linux Distros Unpatched Vulnerability : CVE-2018-1000180
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pair...
Linux Distros Unpatched Vulnerability : CVE-2019-11757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a...
Linux Distros Unpatched Vulnerability : CVE-2018-6042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HT...
Linux Distros Unpatched Vulnerability : CVE-2018-13797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec rather than execFil...
Linux Distros Unpatched Vulnerability : CVE-2017-1000082
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd v233 and earlier fails to safely parse usernames starting with a numeric digit e.g. 0day, running the service in question with root privileges rather th...
Linux Distros Unpatched Vulnerability : CVE-2025-38487
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled Mitigate e.g. the following: echo 1e789080.lpc-snoop...
Linux Distros Unpatched Vulnerability : CVE-2025-22872
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, thi...