8665 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-36657
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uptimed before 0.4.6-r1 on Gentoo allows local users with access to the uptimed user account to gain root privileges by creating a hard link within the...
Linux Distros Unpatched Vulnerability : CVE-2022-42961
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operation...
Linux Distros Unpatched Vulnerability : CVE-2018-8006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveM...
Linux Distros Unpatched Vulnerability : CVE-2019-14459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfdump 1.6.17 and earlier is affected by an integer overflow in the function Processipfixtemplatewithdraw in ipfix.c that can be abused in order to crash the...
Linux Distros Unpatched Vulnerability : CVE-2018-21232
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags. CVE-2018-21232 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2022-29577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed...
Linux Distros Unpatched Vulnerability : CVE-2023-24284
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the ismarkable function. CVE-2023-24284 Note that Nessus reli...
Linux Distros Unpatched Vulnerability : CVE-2022-34502
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attacker...
Linux Distros Unpatched Vulnerability : CVE-2024-36465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A low privilege regular Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands...
Linux Distros Unpatched Vulnerability : CVE-2023-39275
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to...
Linux Distros Unpatched Vulnerability : CVE-2022-33747
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M Physical-to-Machine mapping. When lar...
Linux Distros Unpatched Vulnerability : CVE-2021-28690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see...
Linux Distros Unpatched Vulnerability : CVE-2020-11864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libEMF aka ECMA-234 Metafile Library through 1.0.11 allows denial of service issue 2 of 2. CVE-2020-11864 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2020-23914
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize located in peglib.h. It allows an...
Linux Distros Unpatched Vulnerability : CVE-2024-10573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer...
Linux Distros Unpatched Vulnerability : CVE-2024-4539
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from...
Linux Distros Unpatched Vulnerability : CVE-2024-9979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak...
Linux Distros Unpatched Vulnerability : CVE-2023-46750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - URL Redirection to Untrusted Site 'Open Redirect' vulnerability when form authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or...
Linux Distros Unpatched Vulnerability : CVE-2019-20805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - plxelf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PTDYNAMIC segment. CVE-2019-20805 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2019-17558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through...