SUSE SLES12 Security Update : shadow (SUSE-SU-2024:2603-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2603-1 advisory. - CVE-2013-4235: Fixed a race condition when copying and removing directory trees bsc916845. Tenable has extracted the preceding description...

Photon OS 5.0: Libcap PHSA-2023-5.0-0020

An update of the libcap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0020. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Huawei EulerOS: Security Advisory for libcap (EulerOS-SA-2024-1686)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : libcap (EulerOS-SA-2024-1686)

According to the versions of the libcap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the...

RHEL 7 : libcap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libcap: Integer Overflow in libcapstrdup CVE-2023-2603 - A vulnerability was found in the pthreadcreate...

RHEL 6 : libcap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libcap: Integer Overflow in libcapstrdup CVE-2023-2603 - A vulnerability was found in the pthreadcreate...

CVE-2024-2603 Salon booking system <= 9.6.5 - Editor+ Stored XSS via Email Settings

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin or editor depending on Salon booking system WordPress plugin through 9.6.5 configuration to perform Stored Cross-Site Scripting attacks...

CVE-2024-2603

CVE-2024-2603 affects the Salon booking system WordPress plugin (versions ≤ 9.6.5). The issue is due to incomplete sanitization/escaping of certain settings, enabling Stored XSS by high-privilege users (admin or editor, depending on configuration) even when unfiltered_html is disallowed (e.g., mu...

WordPress Salon booking system Plugin <= 9.6.5 is vulnerable to Cross Site Scripting (XSS)

Software Salon booking system Type Plugin Vulnerable versions = 9.6.5 Fixed in 9.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2603 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d3efd4f7767a Credits Bob Matyas Required...

openSUSE: Security Advisory for libcap (SUSE-SU-2023:2956-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : libcap (CESA-2023:4524)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:4524 advisory. - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to return an...

Moderate: Red Hat Security Advisory: libcap security update

An update for libcap is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

MAL-2024-407 Malicious code in wlwz-2312-2603 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7e17bae7395286135322e62193a2139b0a3f008e3ab63efb4a2f02ab7f42455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2603 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7e17bae7395286135322e62193a2139b0a3f008e3ab63efb4a2f02ab7f42455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS Virtualization 2.9.1 : libcap (EulerOS-SA-2023-2958)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the inp...

EulerOS Virtualization 2.9.0 : libcap (EulerOS-SA-2023-2984)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the inp...

EulerOS 2.0 SP10 : libcap (EulerOS-SA-2023-2812)

According to the versions of the libcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the input string is...

EulerOS Virtualization 2.10.0 : libcap (EulerOS-SA-2023-2936)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the inp...

EulerOS Virtualization 3.0.6.6 : libcap (EulerOS-SA-2023-3400)

According to the versions of the libcap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the...

Huawei EulerOS: Security Advisory for libcap (EulerOS-SA-2023-3400)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...