24380 matches found
Important: golang
Issue Overview: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the...
asesorapandora.com.ar Cross Site Scripting vulnerability OBB-3720051
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
acg-wien.at Cross Site Scripting vulnerability OBB-3719407
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ubuntu: Security Advisory (USN-6386-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Contact form Form For All Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Software Contact form Form For All Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5337 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 14aaff51ee15 Credits Lana Codes Require...
SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2023:3903-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3903-1 advisory. - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed...
SUSE SLES15 Security Update : xen (SUSE-SU-2023:3902-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3902-1 advisory. - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed...
SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2023:3895-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3895-1 advisory. - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed...
Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-6386-2)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6386-2 advisory. Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from divisio...
Oracle Linux 8 : kernel (ELSA-2023-12839)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12839 advisory. - x86/microcode/AMD: Rename a couple of functions CVE-2023-20593 - x86/microcode: Add a parameter to microcodecheck to store CPU capabilities...
openSUSE 15: golang-github-QubitProducts-exporter_exporter / etc (SUSE-SU-2023:3868-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3868-1 advisory. golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix...
GHSA-RGF9-J7GV-RQ22 Microweber Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of the 2.x branch...
Ubuntu 18.04 ESM : libwebp vulnerability (USN-6369-2)
The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6369-2 advisory. USN-6369-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the preceding description...
SUSE SLES15 / openSUSE 15 Security Update : cni-plugins (SUSE-SU-2023:3816-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3816-1 advisory. - rebuild the package with the go 1.21 security release bsc1212475. Tenable has extracted the preceding description block...
Design/Logic Flaw
A vulnerability in the Layer 2 Tunneling Protocol L2TP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain L2TP packets. An attacker could explo...
CVE-2023-41360 affecting package frr for versions less than 8.5.3-2
CVE-2023-41360 affecting package frr for versions less than 8.5.3-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-4569 affecting package kernel for versions less than 5.15.131.1-2
CVE-2023-4569 affecting package kernel for versions less than 5.15.131.1-2. A patched version of the package is available...
CVE-2023-31130 affecting package nodejs18 for versions less than 18.17.1-2
CVE-2023-31130 affecting package nodejs18 for versions less than 18.17.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-30589 affecting package nodejs18 for versions less than 18.17.1-2
CVE-2023-30589 affecting package nodejs18 for versions less than 18.17.1-2. An upgraded version of the package is available that resolves this issue...