CBL Mariner 2.0 Security Update: kernel (CVE-2023-3567)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3567 advisory. - A use-after-free flaw was found in vcsread in drivers/tty/vt/vcscreen.c in vcscreen in the Linux Kernel. This...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-4194)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4194 advisory. - A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-4132)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4132 advisory. - A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs durin...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-32248)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32248 advisory. - A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw...

CBL Mariner 2.0 Security Update: krb5 (CVE-2023-36054)

The version of krb5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-36054 advisory. - lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialize...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-4147)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4147 advisory. - A use-after-free flaw was found in the Linux kernel's Netfilter functionality when adding a rule with...

CVE-2023-40761

User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

GEN Security+ 4.0 SQL Injection

==================================================================================================================================== | Title : GEN Security+ v4.0 Sql Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit ...

Fedora: Security Advisory for kernel (FEDORA-2023-ee241dcf80)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for java-17-openjdk-portable (FEDORA-2023-b55ba9ed7a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-38409)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38409 advisory. - An issue was discovered in setcon2fbmap in drivers/video/fbdev/core/fbcon.c in the Linux...

i2soft CMS 2.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : i2soft CMS v2.0 Insecure Direct Object Reference Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefo...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-3776)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3776 advisory. - A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-3610)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3610 advisory. - A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achiev...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-3863)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3863 advisory. - A use-after-free flaw was found in nfcllcpfindlocal in net/nfc/llcpcore.c in NFC in the Linux kernel. This fl...

CVE-2023-37388

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin = 2.0 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin = 2.0 versions...

EulerOS 2.0 SP9 : perl-HTTP-Tiny (EulerOS-SA-2023-2595)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration wher...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2023-2584)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105remove in...

EulerOS 2.0 SP9 : openldap (EulerOS-SA-2023-2622)

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function. CVE-2023-2953 Note that...