Fedora 40 : unbound (2024-c07e065747)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c07e065747 advisory. Fixes CVE-2024-8508 - https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1 Tenable has extracted the preceding description block directl...

Fedora 40 : p7zip (2024-5c99e1d579)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5c99e1d579 advisory. Fix wrapper to hide password from process history Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 40 : aws (2024-63f98f8c60)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-63f98f8c60 advisory. CVE-2024-41708: Ada Web Server did not use a cryptographically secure pseudorandom number generator. AWS.Utils.Random and AWS.Utils.RandomString used...

[SECURITY] Fedora 40 Update: chromium-129.0.6668.89-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

Fedora 40 : chromium (2024-452b60addf)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-452b60addf advisory. update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370:...

Fedora 40 : pgadmin4 (2024-126d22c121)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-126d22c121 advisory. Fix CVE-2024-9014. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora: Security Advisory (FEDORA-2024-126d22c121)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : firefox (2024-5f39927e90)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5f39927e90 advisory. - New upstream builds 131.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

CVE-2024-28810

creationtimestamp| type| source ---|---|--- 2024-09-30 21:40:48+00:00| seen| https://t.me/cvedetector/6681...

Fedora: Security Advisory (FEDORA-2024-5db248f2a0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: cjson-1.7.18-1.fc40

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file...

[SECURITY] Fedora 40 Update: cups-2.4.10-7.fc40

CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Fedora 40 : cups / cups-browsed / libcupsfilters / libppd (2024-01127974ec)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-01127974ec advisory. Fix for remote vulnerabilities against OpenPrinting cups-filters Tenable has extracted the preceding description block directly from the Fedora...

Fedora 40 : chromium (2024-aaff7345b8)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-aaff7345b8 advisory. Update to 129.0.6668.70 High CVE-2024-9120: Use after free in Dawn High CVE-2024-9121: Inappropriate implementation in V8 High CVE-2024-9122: Type...

[SECURITY] Fedora 40 Update: chisel-1.10.0-1.fc40

A fast TCP tunnel over HTTP...

Fedora: Security Advisory (FEDORA-2024-5aad2fda6a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : chisel (2024-5aad2fda6a)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5aad2fda6a advisory. Update to new upstream version closes rhbz2303131 Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2024-9063

creationtimestamp| type| source ---|---|--- 2024-09-25 04:16:40+00:00| seen| https://t.me/cvedetector/6249...

CVE-2024-8914: Improper Neutralization of Input During Web Page Generation

The Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.1 due to incorrect use of the wpksesallowedhtml function, which allows the 'onclick' attribute for...

CKEditor cross-site scripting vulnerability

CKEditor is an open source, web-based text editor from the individual developer Marek Lewandowski. A cross-site scripting vulnerability exists in CKEditor 5 version 40.0.0 to versions prior to 43.1.1, which stems from the presence of cross-site scripting XSS that can lead to unauthorized JavaScri...