Zoom Workplace Desktop App < 6.2.5 Escalation of Privilege (ZSB-25004)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.2.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-25004 advisory. - Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduc...

CVE-1999-0145 affecting package sendmail 8.15.2-46

CVE-1999-0145 affecting package sendmail 8.15.2-46. No patch is available currently...

Photon OS 5.0: Gst PHSA-2023-5.0-0145

An update of the gst package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0145. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20424...

Photon OS 4.0: Systemd PHSA-2022-4.0-0145

An update of the systemd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0145. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2019-0145

creationtimestamp| type| source ---|---|--- 2024-02-14 10:26:30+00:00| seen| https://t.me/ctinow/184516...

Oracle Linux 7 : ipa (ELSA-2024-0145)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0145 advisory. 4.6.8-5.0.1 - Blank out header-logo.png product-name.png - Replace login-screen-logo.png Orabug: 20362818 4.6.8-5.el79.16 - Resolves: RHEL-12570 ipa: Invalid CS...

RHEL 7 : ipa (RHSA-2024:0145)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0145 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...

CentOS 7 : ipa (RHSA-2024:0145)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0145 advisory. - A Cross-site request forgery vulnerability exists in ipa/session/loginpassword in all supported versions of IPA. This flaw allows an attacker to trick the use...

MSC-2024-0145

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

Important Photon OS Security Update - PHSA-2023-5.0-0145

Updates of 'gst-plugins-bad' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0145

Updates of 'gst-plugins-bad' packages of Photon OS have been released...

Mageia: Security Advisory (MGASA-2023-0145)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-0145

creationtimestamp| type| source ---|---|--- 2023-03-20 21:04:25+00:00| seen| https://t.me/cibsecurity/60338...

CVE-2023-0145 Saan World Clock <= 1.8 - Contributor+ Stored XSS

The Saan World Clock WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0145

CVE-2023-0145 affects the WordPress plugin “Saan World Clock” up to version 1.8. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes, allowing stored cross-site scripting when a page/post renders the shortcode. Impact: stored XSS that can affect u...

WordPress Saan World Clock Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)

Software Saan World Clock Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0145 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID cb720ac68691 Credits Lana Codes Required...

SUSE CVE-2014-0145

Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service crash or possibly execute arbitrary code via a large 1 L1 table in the qcow2snapshotloadtmp in the QCOW 2 block driver block/qcow2-snapshot.c or 2 uncompressed chunk, 3 chunk length...

SUSE CVE-2017-0145

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...

Ubuntu: Security Advisory (USN-5535-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5486-1: Intel Microcode vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that some Intel processors did not implement sufficient control flow management. A local attacker could use this to cause a denial of service. CVE-2021-0127 Joseph Nuzman discovered that...