CBL Mariner 2.0 Security Update: kernel (CVE-2024-49868)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49868 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference wh...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50180)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50180 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-5288)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5288 advisory. - An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, lead...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50128)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50128 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50024)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50024 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50278)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50278 advisory. - In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47705)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47705 advisory. - In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49902)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49902 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50234)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50234 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: Clear stale interrupts...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50082)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50082 advisory. - In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rqqoswait vs...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-1544)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1544 advisory. - Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47706)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47706 advisory. - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq-bi...

Ubuntu: Security Advisory (USN-7155-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Surbma | SalesAutopilot Shortcode plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Surbma | SalesAutopilot Shortcode versions = 2.0...

EulerOS 2.0 SP11 : ruby (EulerOS-SA-2024-2972)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pul...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2024-2984)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds...

EulerOS 2.0 SP12 : httpd (EulerOS-SA-2024-2937)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

EulerOS 2.0 SP12 : OpenIPMI (EulerOS-SA-2024-2940)

According to the versions of the OpenIPMI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator, resulting in denial of service or wit...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2024-2960)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. A use-after-free was found in Vim 9.1.0764. When closing a buffer visible in a window a BufWinLeave...

EulerOS 2.0 SP11 : expat (EulerOS-SA-2024-2966)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...