openSUSE: Security Advisory for sccache (SUSE-SU-2023:3526-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-24713

creationtimestamp| type| source ---|---|--- 2024-02-10 09:21:22+00:00| seen| https://t.me/ctinow/182491 2024-02-12 06:19:52+00:00| seen| https://t.me/arpsyndicate/3460 2024-02-12 06:59:39+00:00| seen| https://t.me/arpsyndicate/3470 2024-03-03 11:11:33+00:00| seen| https://t.me/ctinow/198685...

CVE-2024-24713 WordPress Auto Listings Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Auto Listings Auto Listings – Car Listings & Car Dealership Plugin for WordPress allows Stored XSS.This issue affects Auto Listings – Car Listings & Car Dealership Plugin for WordPress: from n/a...

CVE-2024-24713

CVE-2024-24713 concerns the WordPress plugin “Auto Listings – Car Listings & Car Dealership” vulnerable to a stored XSS due to improper input neutralization during web page generation. Affected versions are listed as n/a through 2.6.5. The issue is described as Cross-Site Scripting and was public...

CVE-2024-24713 WordPress Auto Listings Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Auto Listings Auto Listings – Car Listings & Car Dealership Plugin for WordPress allows Stored XSS.This issue affects Auto Listings – Car Listings & Car Dealership Plugin for WordPress: from n/a...

WordPress Auto Listings Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS)

Software Auto Listings Type Plugin Vulnerable versions = 2.6.5 Fixed in 2.6.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24713 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c93447ae1758 Credits resecured.io Required privilege...

Rocky Linux 8 : firefox (RLSA-2022:1287)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1287 advisory. - NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free an...

Rocky Linux 8 : thunderbird (RLSA-2022:1301)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1301 advisory. - NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free an...

SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2023:1844-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1844-1 advisory. Update aws-nitro-enclaves-cli to version 1.2.2git0.4ccc639: CVE-2022-31394: Fixed DoS vulnerability in hyper crate...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sccache (SUSE-SU-2022:4073-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4073-1 advisory. Updated to version 0.3.0: - CVE-2022-24713: Fixed Regex denial of service bsc1196972. -...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rustup (SUSE-SU-2022:3949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3949-1 advisory. Updated to version 1.25.10: - CVE-2022-24713: Fixed Regex denial of service bsc1196972. -...

Ubuntu 20.04 LTS / 22.04 LTS : rust-regex vulnerability (USN-5610-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5610-1 advisory. Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions regex it parses. An attacker could possibly...

Mozilla Firefox ESR Security Advisory (MFSA2022-14) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Exploit for Uncontrolled Resource Consumption in Rust-Lang Regex

POC of CVE-2022-24713 on Ubuntu Install the current rust-regex...

Mozilla Firefox Security Advisory (MFSA2022-13) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2022-13. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Amazon Linux 2 : thunderbird (ALAS-2022-1789)

The version of thunderbird installed on the remote host is prior to 91.8.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1789 advisory. The Mozilla Foundation Security Advisory describes this flaw as: NSSToken objects were referenced via direct points,...

Slackware: Security Advisory (SSA:2022-095-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2022:1176-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1176-1 advisory. - Updated to version 91.8 bsc1197903: - CVE-2022-1097: Fixed a memory corruption issue with...

SUSE: Security Advisory (SUSE-SU-2022:1176-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...