11572 matches found
CBL Mariner 2.0 Security Update: kernel (CVE-2024-43817)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43817 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-43897)
"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43897 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: drop bad gso csumstart and offset ...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-46714)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46714 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbsclsetscalerfilt...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-46740)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46740 advisory. - In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-44987)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44987 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6sendskb syzbot...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-43853)
"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43853 advisory. - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-43893)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43893 advisory. - In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-46763)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46763 advisory. - In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO. We...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-46757)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46757 advisory. - NIST NVD Details CVE-2024-46757 Note that Nessus has not tested for this issue but has instead relied only o...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-44983)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44983 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan head...
CBL Mariner 2.0 Security Update: vim (CVE-2024-41965)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41965 advisory. - Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning ...
CVE-2024-9756 Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload
The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited arbitrary file uploads due to a missing capability check on the wcoaaddattachment AJAX action in versions 2.0 to 2.4.1. This makes it possible for authenticated attackers, with subscriber-level access...
PT-2024-39820 · WordPress · Order Attachments For Woocommerce
Name of the Vulnerable Software and Affected Versions: Order Attachments for WooCommerce plugin for WordPress versions 2.0 through 2.4.1 Description: The issue is related to unauthorized limited arbitrary file uploads due to a missing capability check on the "wcoa add attachment" AJAX action. Thi...
Debian: Security Advisory (DLA-3914-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0132)
The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0132 advisory. - NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU...
CBL Mariner 2.0 Security Update: unbound (CVE-2024-33655)
The version of unbound installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33655 advisory. - The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource...
CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0133)
The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0133 advisory. - NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of...
CVE-2024-9519 UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation
The UserPlus plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'savemetaboxform' function in versions up to, and including, 2.0. This makes it possible for authenticated attackers, with editor-level permissions or above, to update t...
Announcing TruRisk™ 2.0: Unleashing Next-Level Precision in Cyber Risk Management
In cybersecurity, quantifying risk with precision is essential for robust security posture management. At Qualys, we continuously refine our methodologies to meet and exceed the evolving demands of vulnerability management and risk management. In October 2024, the launch of Qualys Enterprise...
