CBL Mariner 2.0 Security Update: kernel (CVE-2007-4998)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2007-4998 advisory. - cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers ...

CVE-2007-4998 affecting package kernel for versions less than 6.6.35.1-4

CVE-2007-4998 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

[slackware-security] htdig

New htdig packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/htdig-3.2.0b6-i586-10slack15.0.txz: Rebuilt. Patch XSS vulnerability. Thanks to jayjwa. Get this out of cgi-bin. Thanks to LuckyCyborg...

Slackware: Security Advisory (SSA:2024-206-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4723

creationtimestamp| type| source ---|---|--- 2024-07-24 23:22:42+00:00| seen| Telegram/ACXWWXdwqVczSFNIGprP-Vm7ijCWpvZBkvSUNHyZ-BU2Vyr 2024-10-15 10:14:15+00:00| seen| Telegram/HfSunJuoYNfbsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ...

Photon OS 4.0: Linux PHSA-2023-4.0-0466

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0466. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2007-0885

creationtimestamp| type| source ---|---|--- 2024-07-10 15:19:52+00:00| published-proof-of-concept| Telegram/urcLDQnCRDN1gckPAqtX7HqCuWDnXpTggZKHzO6od5XBRDmrA 2025-07-08 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hehxz2z...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases / python3 (CVE-2007-4559)

The version of CBL-Mariner Releases / python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2007-4559 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the...

CVE-2007-2768

creationtimestamp| type| source ---|---|--- 2024-07-01 14:30:24+00:00| seen| Telegram/2G0LL9YDDO0dQKSo5p4zQWAL-pbipATIxiBPSKqKsYKP6RG0 2024-07-01 14:33:02+00:00| seen| Telegram/w0w9iKcyXi70OnNrtP96yLy6sw-7f3qLcDmBnN0l3DtxqHg 2024-07-01 14:34:42+00:00| seen|...

RHEL 8 : python (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python: tarfile module directory traversal CVE-2007-4559 - python: RecursionError: maximum recursion dept...

RHEL 4 : kdebase (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - konqueror visual hostname truncation in HTTP authentication dialog CVE-2007-3143 Note that Nessus has not tested fo...

RHEL 4 : xmms (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - XMMS multiple issues CVE-2007-0654 CVE-2007-0653, CVE-2007-0654 Note that Nessus has not tested for these...

RHEL 4 : subversion (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - subversion: revision properties disclosure to user with partial access CVE-2007-2448 Note that Nessus has not teste...

RHEL 5 : kernel (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kernel: netfilter: use-after-free in tcpmssmanglepacket function in net/netfilter/xtTCPMSS.c CVE-2017-180...

RHEL 4 : libwmf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gd: additional overflows CVE-2004-0941 - gd: arc drawing functions can consume large amount of CPU time...

RHEL 3 : rsync (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rsync excluded content access restrictions bypass via symlinks CVE-2007-6200 Note that Nessus has not tested for th...

RHEL 6 : rubygems (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - RubyGems: Specially-crafted Gem archive can overwrite system files CVE-2007-0469 - rubygems: Improper...

PT-2024-25256 · Ncast · Ncast Yingshi High-Definition Intelligent Recording/Playback System

Name of the Vulnerable Software and Affected Versions: Ncast Yingshi high-definition intelligent recording and playback system versions 2007 through 2017 Description: The issue allows a remote attacker to execute arbitrary code via the "/manage/IPSetup.php" backend function. This enables the...

Fedora 40 : python3.6 (2024-46374d2703)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-46374d2703 advisory. Security fix for CVE-2007-4559. ---- Fix tests for XMLPullParser with Expat 2.6.0 Tenable has extracted the preceding description block directly fro...

RHEL 8 : pcs (RHSA-2024:2007)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2007 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rubygem-rack: Denial ...