72 matches found
Oracle Linux 8 : postgresql:15 (ELSA-2024-6001)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6001 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 15.8-1 - Update to 15.8 - Fix CVE-2024-7348 Tenable has extracted the preceding description block...
AlmaLinux 8 : postgresql:15 (ALSA-2024:6001)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6001 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 postgresql: PostgreSQL pgstatsext and pgstatsextexprs lack...
Malicious code in wlwz-2312-6001 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dd2ae4e48045f44fdf401b0b267f7782b0d71b01453094cb6002b9b57a45643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in wlwz-2312-6001
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2023-6001 Prometheus Metrics Accessible Pre-Authentication
Prometheus metrics are available without authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere environment...
CVE-2023-6001 Prometheus Metrics Accessible Pre-Authentication
Prometheus metrics are available without authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere environment...
CVE-2023-6001
Prometheus metrics are accessible without authentication in YugabyteDB Anywhere (CVE-2023-6001). Affected component is Prometheus metrics exposure within YugabyteDB Anywhere, leading to potential exposure of sensitive environment information. Documented impact includes high confidentiality impact...
K24578092: Linux kernel vulnerability CVE-2017-6001
Security Advisory Description Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perfeventopen system calls for moving a software group into a hardware context. NOTE: this vulnerability exis...
Mageia: Security Advisory (MGASA-2017-0147)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0136)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-6001
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
CVE-2020-6001
This CVE-2020-6001 entry is rejected/not used and does not represent an active vulnerability.
Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin) Vulnerability
Exploit for php platform in category web applications Exploit Title: Exagate Sysguard 6001 - Cross-Site Request Forgery Add Admin Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.exagate.com/ Software Link: https://www.exagate.com/sysguard-6001 Version: SYSGuard 6001 HTML CSRF Po...
Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
Exagate Sysguard 6001 - Cross-Site Request Forgery Add Admin Exploit Title: Exagate Sysguard 6001 - Cross-Site Request Forgery Add Admin Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.exagate.com/ Software Link: https://www.exagate.com/sysguard-6001 Version: SYSGuard 6001 HTML...
Exagate Sysguard 6001 Cross Site Request Forgery
Exploit Title: Exagate Sysguard 6001 - Cross-Site Request Forgery Add Admin Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.exagate.com/ Software Link: https://www.exagate.com/sysguard-6001 Version: SYSGuard 6001 HTML CSRF PoC :...
Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)
Exploit Title: Exagate Sysguard 6001 - Cross-Site Request Forgery Add Admin Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.exagate.com/ Software Link: https://www.exagate.com/sysguard-6001 Version: SYSGuard 6001 HTML CSRF PoC :...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2017-1056)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-6001
CVE-2019-6001 is a buffer overflow in Canon’s Picture Transfer Protocol (PTP) SetAdapterBatteryReport command affecting numerous EOS-family cameras (e.g., EOS-1D X, 5D series, 6D/7D, 70D, 80D, 750D/800D, and PowerShot models) with firmware versions listed as before or older. The root cause is an ...
F5 Networks BIG-IP : Linux kernel vulnerability (K24578092)
The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.2 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K24578092 advisory. - Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via ...