47 matches found
RHEL 8 : lasso (RHSA-2025:21400)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21400 advisory. The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2...
CVE-2021-21400
wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the typed passphrase will be sent into the most recently used chat when the user does not actively give...
Linux Distros Unpatched Vulnerability : CVE-2023-21400
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In multiple functions of iouring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in th...
Ubuntu: Security Advisory (USN-7234-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-21400
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2025-21400
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2025-21400
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2025-21400 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2025-21400
CVE-2025-21400 is a Microsoft SharePoint Server remote code execution vulnerability. Connected advisories confirm affected product is SharePoint Server with RCE impact and a CVSS v3.1 base score of 8.0 (High). Patches are available: KB5002681 (SharePoint Server Subscription Edition) and KB5002685...
Security Updates for Microsoft SharePoint Server Subscription Edition (February 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a Remote Code Execution Vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Security Updates for Microsoft SharePoint Server 2019 (February 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a Remote Code Execution Vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid216130;...
Security Updates for Microsoft SharePoint Server 2016 (February 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a Remote Code Execution Vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid216137;...
Ubuntu: Security Advisory (USN-7234-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7234-2 linux-hwe-5.4 vulnerabilities
Ye Zhang and Nicolas Wu discovered that the iouring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...
CVE-2025-21400
creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:22+00:00| see...
Microsoft Azure CLI Confcom Extension < 0.3.3 Privilege Escalation
An elevation of privilege vulnerability exists in Microsoft Azure CLI Confcom extension. An unauthenticated, remote attacker can exploit this, to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-1443)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-21400
creationtimestamp| type| source ---|---|--- 2024-03-13 07:55:10+00:00| seen| https://t.me/itsecnews/4191 2024-03-13 08:30:38+00:00| seen| https://t.me/kasperskyb2b/1170 2024-03-13 11:41:56+00:00| seen| https://t.me/truesecator/5514 2024-03-13 20:18:31+00:00| seen| https://t.me/ctinow/207112...
CVE-2024-21400
CVE-2024-21400 targets Azure Kubernetes Service Confidential Containers. Connected sources confirm a privilege-escalation flaw due to insufficient access controls in deployment/management of confidential containers, enabling remote attackers to gain elevated privileges within affected AKS environ...
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3376-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...