Amazon Linux 2 : ImageMagick, --advisory ALAS2-2023-2240 (ALAS-2023-2240)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2240 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

CVE-2023-2240

creationtimestamp| type| source ---|---|--- 2023-04-22 07:37:29+00:00| seen| https://t.me/cibsecurity/62649...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2240

CVE-2023-2240 affects Microweber/microweber prior to version 1.3.4. The root cause is improper privilege management, leading to high-severity impact across confidentiality, integrity, and availability (per CVSS 3.1/3.0 data: HIGH). No exploit details are provided in the supplied documents. The vu...

Ubuntu: Security Advisory (USN-1074-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-2240

creationtimestamp| type| source ---|---|--- 2022-07-25 16:32:56+00:00| seen| https://t.me/cibsecurity/46889...

CVE-2022-2240

The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin download and open it...

CVE-2022-2240

CVE-2022-2240 affects the WordPress plugin Request a Quote up to version 2.3.7, where the CSV upload handling does not validate uploaded CSV files. This allows unauthenticated users to attach a malicious CSV to a quote, enabling CSV injection when an admin downloads and opens the file. The vulner...

CVE-2022-2240 Request a Quote <= 2.3.7 - CSV Injection

The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin download and open it...

SUSE: Security Advisory (SUSE-SU-2012:0644-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2240

CVE-2021-2240 affects Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected: Outside In Filters in Oracle Outside In Technology, version 8.5.5. Vector: network (HTTP) with no authentication. Impact: unauthorized update/insert/delete and read access to Oracle ...

SUSE: Security Advisory (SUSE-SU-2015:0455-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2240

A cross-site request forgery CSRF vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts...

CVE-2020-2240

A cross-site request forgery CSRF vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts...

CVE-2020-2240

CVE-2020-2240 pertains to Jenkins Database Plugin (versions ≤ 1.6). The issue is a CSRF vulnerability arising from a lack of proper origin validation, enabling an attacker to trigger unintended requests and execute arbitrary SQL scripts against the plugin’s database. Several sources (Red Hat, CNV...

Debian: Security Advisory (DLA-2240-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2240

CVE-2019-2240 affects Qualcomm Snapdragon platforms (Auto/Compute/Connectivity, Snapdragon family across IPQ4xxx through SDX lines, QCA wireless ICs, etc.). Description: error handling during rendering of surface content to the screen is not properly checked, causing unpredictable behavior. Root ...

Schweitzer Engineering Laboratories Axion PLC Detection

Binary data 755323.prm...

CVE-2018-2240

...

Oracle Linux 7 : openslp (ELSA-2018-2240)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2240 advisory. 1:2.0.0-7 - Fix possible heap memory corruption, CVE-2017-17833 Resolves: 1575698 Tenable has extracted the preceding description block directly from the Oracle...