Amazon Linux 2 : gtk3 (ALAS-2024-2602)

The version of gtk3 installed on the remote host is prior to 3.22.30-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2602 advisory. gtk3: gtk2: Library injection from CWD CVE-2024-6655 Tenable has extracted the preceding description block directly from the tested...

Important: gtk3

Issue Overview: gtk3: gtk2: Library injection from CWD CVE-2024-6655 Affected Packages: gtk3 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update gtk3 or yum...

Photon OS 5.0: Libcap PHSA-2023-5.0-0020

An update of the libcap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0020. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-2602

creationtimestamp| type| source ---|---|--- 2024-07-11 11:37:51+00:00| seen| https://t.me/cvedetector/651 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-03...

CVE-2024-2602

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor...

CVE-2024-2602

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor...

CVE-2024-2602

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor...

CVE-2024-2602

CVE-2024-2602 maps to Schneider Electric EcoStruxure Foxboro SCADA FoxRTU Station, where a Path Traversal flaw in the saved project file handling can enable remote code execution for an authenticated user if the project file has been tampered. Connected sources indicate this affects FoxRTU Statio...

RHEL 6 : libcap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libcap: Integer Overflow in libcapstrdup CVE-2023-2603 - A vulnerability was found in the pthreadcreate...

RHEL 7 : libcap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libcap: Integer Overflow in libcapstrdup CVE-2023-2603 - A vulnerability was found in the pthreadcreate...

RHEL 5 : kernel (RHSA-2018:2602)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2602 advisory. - Kernel: hw: cpu: L1 terminal fault L1TF CVE-2018-3620, CVE-2018-3646 Note that Nessus has not tested for these issues but has instead reli...

CVE-2022-2602 affecting package kernel for versions less than 5.15.153.1-1

CVE-2022-2602 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...

CentOS 8 : libcap (CESA-2023:4524)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:4524 advisory. - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to return an...

Malicious code in wlwz-2312-2602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf6ae133e3bf83d14cd9cce6ac2d71b455b6056e2b5ef16bf43c18fcb4eb7ef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22911

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

UBUNTU-CVE-2024-22911

A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602...

EulerOS 2.0 SP11 : libcap (EulerOS-SA-2023-2648)

According to the versions of the libcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to retur...

EulerOS 2.0 SP11 : libcap (EulerOS-SA-2023-2690)

According to the versions of the libcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to retur...

EulerOS Virtualization 2.11.0 : libcap (EulerOS-SA-2023-2756)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause...

EulerOS Virtualization 2.11.1 : libcap (EulerOS-SA-2023-2725)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause...