EulerOS 2.0 SP9 : rsync (EulerOS-SA-2023-1135)

According to the versions of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that...

EulerOS 2.0 SP9 : systemd (EulerOS-SA-2023-1115)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for tim...

EulerOS 2.0 SP9 : hyperscan (EulerOS-SA-2023-1101)

According to the versions of the hyperscan packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Improper buffer restrictions in the Hyperscan library maintained by IntelR all versions downloaded before 04/29/2022 may allow an...

EulerOS 2.0 SP9 : sudo (EulerOS-SA-2023-1113)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a...

EulerOS 2.0 SP9 : pixman (EulerOS-SA-2023-1132)

According to the versions of the pixman package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflo...

EulerOS 2.0 SP11 : python-oauthlib (EulerOS-SA-2023-1020)

According to the versions of the python-oauthlib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker...

EulerOS 2.0 SP11 : bash (EulerOS-SA-2023-1026)

According to the versions of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parametertransform. This issue may lead to memory problems...

EulerOS 2.0 SP11 : cryptsetup (EulerOS-SA-2023-1029)

According to the versions of the cryptsetup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An...

EulerOS 2.0 SP11 : bash (EulerOS-SA-2023-1001)

According to the versions of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parametertransform. This issue may lead to memory problems...

EulerOS 2.0 SP11 : dhcp (EulerOS-SA-2023-1032)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported...

EulerOS 2.0 SP11 : expat (EulerOS-SA-2023-1008)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in...

EulerOS 2.0 SP11 : pixman (EulerOS-SA-2023-1018)

According to the versions of the pixman package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflo...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-1050)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. CVE-2022-3234 - Use After Free in GitHub repository vim/vim prior to...

VMware Workstation 16.0.x < 16.2.5 Vulnerability (VMSA-2022-0033)

The version of VMware Workstation installed on the remote host is 16.0.x prior to 16.2.5. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...

VMware ESXi 7.0 / 8.0 Heap Out-of-bounds Write (VMSA-2022-0033)

VMware ESXi contain a heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. The exploitation is contained...

PT-2023-7671 · WordPress · Cryptocurrency Widgets Pack

Name of the Vulnerable Software and Affected Versions: Cryptocurrency Widgets Pack WordPress plugin versions prior to 2.0 Description: The issue is related to a lack of sanitization and escaping of some parameters before using them in SQL statements via an AJAX action. This can lead to SQL...

Forma LMS <= 2.4.4 Improper Authentication Vulnerability

Forma LMS is prone to an improper authentication vulnerability. Copyright C 2022 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free...

CVE-2022-36664

Password Manager for IIS 2.0 has a cross-site scripting XSS vulnerability via the /isapi/PasswordManager.dll ResultURL parameter...

Cross site scripting

Password Manager for IIS 2.0 has a cross-site scripting XSS vulnerability via the /isapi/PasswordManager.dll ResultURL parameter...

CVE-2021-35953

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows a Remote attacker to cause a Denial of Service device outage via crafted choices of the last three bytes of a characteristic value...