Zoom Workplace Desktop App < 6.2.5 DoS (ZSB-25002)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25002 advisory. - Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct...

CVE-2025-0143

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5ii6gue24 2025-01-30 19:43:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113919014869578265 2025-01-30 20:16:12+00:00| seen|...

Photon OS 4.0: Consul PHSA-2022-4.0-0143

An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0143. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

openSUSE Security Advisory (openSUSE-SU-2024:0143-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2024-0143)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-0143

creationtimestamp| type| source ---|---|--- 2024-02-14 09:56:36+00:00| seen| https://t.me/ctinow/184508...

Oracle Linux 8 : idm:DL1 (ELSA-2024-0143)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0143 advisory. - Resolves: 2242828 Invalid CSRF protection CVE-2023-5455 ipa-healthcheck opendnssec python-jwcrypto python-kdcproxy Tenable has extracted the precedin...

RHSA-2024:0143

creationtimestamp| type| source ---|---|--- 2024-01-10 15:16:26+00:00| seen| https://t.me/ctinow/165853...

CentOS 8 : idm:DL1 (CESA-2024:0143)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2024:0143 advisory. - A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via...

RHEL 8 : idm:DL1 (RHSA-2024:0143)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0143 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...

CVE-2023-0143 Send PDF for Contact Form 7 < 0.9.9.2 - Contributor+ Stored XSS via Shortcode

The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used again...

CVE-2023-0143

The CVE-2023-0143 entry affects the WordPress plugin Send PDF for Contact Form 7, pre-0.9.9.2. The issue is that certain shortcode attributes are not validated/escaped before being output, enabling Stored XSS by users with as little as the Contributor role and targeting higher-privilege admins. T...

WordPress Send PDF for Contact Form 7 Plugin < 0.9.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Send PDF for Contact Form 7 Type Plugin Vulnerable versions 0.9.9.2 Fixed in 0.9.9.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0143 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 570b9726f6b6 Credits Istv...

Security Updates for Microsoft .NET Framework (April 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a denial of service vulnerability. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates...

CVE-2022-0143

creationtimestamp| type| source ---|---|--- 2022-09-20 02:38:37+00:00| seen| https://t.me/cibsecurity/50113...

CVE-2022-0143

CVE-2022-0143 affects ForgeRock LDAP Connector (bundled with Identity Management and Remote Connector Server). The flaw occurs when StartTLS is configured, allowing unauthenticated access in all versions prior to 1.5.20.9. Impact is described as unauthenticated access with potential confidentiali...

openSUSE 15 Security Update : librecad (openSUSE-SU-2022:0143-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0143-1 advisory. - A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote...

Mageia: Security Advisory (MGASA-2014-0426)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : httpd (RHSA-2022:0143)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0143 advisory. - In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow CVE-2021-26691 ...

Oracle Linux 7 : httpd (ELSA-2022-0143)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0143 advisory. - modsession: save one aprstrtok Orabug: 33338149CVE-2021-26690 - Resolves: 2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed...