83 matches found
Oracle Linux 7 : docker-engine (ELSA-2019-4551)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4551 advisory. - update runc for CVE-2019-5736 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...
CVE-2022-4551
CVE-2022-4551 affects the Rich Table of Contents WordPress plugin up to version 1.3.8. The issue is that certain shortcode attributes are not validated/escaped before output, allowing stored XSS for users with the contributor role or higher in pages/posts that embed the shortcode. Impact describe...
WordPress Rich Table of Contents Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)
Software Rich Table of Contents Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4551 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 2ac49cba0f41 Credits Lana Codes...
SUSE SLES15 Security Update : kernel (Live Patch 20 for SLE 15 SP3) (SUSE-SU-2022:4551-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4551-1 advisory. This update for the Linux Kernel 5.3.18-1503005976 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a...
SUSE: Security Advisory (SUSE-SU-2013:1923-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:1915-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM i2 Analysts' Notebook and IBM i2 Analysts' Notebook Premium Memory vulnerabilities
Summary Multiple memory corruption vulnerabilities have been found in the IBM i2 Analysts' Notebook, and IBM i2 Analysts' Notebook Premium. Please see linked CVE's for details. Vulnerability Details CVEID: CVE-2020-4549 DESCRIPTION: IBM i2 Analyst's Notebook could allow a local attacker to execut...
CVE-2020-4551
CVE-2020-4551 affects IBM i2 Analyst’s Notebook and IBM i2 Analyst’s Notebook Premium (versions 9.2.1 and 9.2.2). The issue is a memory corruption weakness that could allow a local attacker to execute arbitrary code by convincing a user to open a specially crafted file. IBM’s bulletin confirms me...
CVE-2019-4551
IBM Security Directory Server (Product: IBM Security Directory Server, Version 6.4.0) is affected by CVE-2019-4551, where the product does not perform an authentication check for a critical resource or functionality, enabling anonymous users to access protected areas. The root cause is missing au...
Debian DSA-4551-1 : golang-1.11 - security update
Daniel Mandragona discovered that invalid DSA public keys can cause a panic in dsa.Verify, resulting in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4551. The text itself is copyright C...
Buffer Overflow
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...
CVE-2016-4551
The CVE-2016-4551 issue affects SAP NetWeaver 2004s, specifically the SAP_BASIS and SAP_ABA components (version 7.00 SP Level 0031). The root cause is a vulnerability that could allow remote attackers to spoof IP addresses written to the Security Audit Log, leveraging network landscape-related ve...
SUSE SLED11 Security Update : Recommended update for LibreOffice (SUSE-SU-2016:0324-1)
This update brings LibreOffice to version 5.0.4, a major version update. It brings lots of new features, bug fixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ - LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module...
Scientific Linux Security Update : libreoffice on SL6.x i386/x86_64 (20151214)
It was discovered that LibreOffice did not properly restrict automatic link updates. By tricking a victim into opening specially crafted documents, an attacker could possibly use this flaw to disclose contents of files accessible by the victim. CVE-2015-4551 An integer underflow flaw leading to a...
Oracle: Security Advisory (ELSA-2015-2619)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for libreoffice RHSA-2015:2619-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for autocorr-af CESA-2015:2619 centos7
Check the version of autocorr-af SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882336";...
CentOS Update for autocorr-af CESA-2015:2619 centos6
Check the version of autocorr-af SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882341";...
Moderate: Red Hat Security Advisory: libreoffice security update
Updated libreoffice packages that fixes multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...