147 matches found
CVE-2024-6200
HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting XSS vulnerability. The injected JavaScript code can execute arbitrary action on behalf of the user accessing a ticket. HaloITSM versions past 2.146.1 and patches starting from 2.143.61 fix the mentioned vulnerability...
Ubuntu 20.04 LTS / 22.04 LTS : ImageMagick vulnerabilities (USN-6200-2)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6200-2 advisory. USN-6200-1 fixed vulnerabilities in ImageMagick. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. This...
RHEL 3 : rsync (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rsync excluded content access restrictions bypass via symlinks CVE-2007-6200 Note that Nessus has not tested for th...
CVE-2023-6200 affecting package kernel for versions less than 5.15.153.1-1
CVE-2023-6200 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...
CVE-2023-6200
creationtimestamp| type| source ---|---|--- 2024-01-28 14:26:44+00:00| seen| https://t.me/ctinow/174952 2024-01-30 18:32:46+00:00| seen| https://t.me/CyberSecurityTechnologies/9881 2024-08-16 09:12:50+00:00| seen| https://t.me/Rootsec2/2655 2024-08-16 09:13:05+00:00| seen|...
CVE-2023-6200
The CVE describes a race condition in the Linux kernel that allows an unauthenticated attacker on an adjacent network to send ICMPv6 router advertisement packets to achieve arbitrary code execution. The impact is documented as high (C/H/I/A) with an adjacent network location and no user interacti...
CVE-2023-6200 Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability
A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution...
Malicious code in wlwz-2312-6200 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6ca6e54462860564791facc95198a8a141acbd698ad669201811f7503dcecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-728 Malicious code in wlwz-2312-6200 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6ca6e54462860564791facc95198a8a141acbd698ad669201811f7503dcecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Oracle Linux 5 : rsync (ELSA-2011-0999)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0999 advisory. - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary fileextracnt increments Resolves: 688923 Tenable has extracted the...
Cisco NX-OS Software Cisco Fabric Services Denial of Service (CVE-2019-1616)
A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resulting in a denial of service DoS condition. The vulnerability is due to insufficient validation of Cisco Fabric Services packets. An...
Ubuntu: Security Advisory (USN-6200-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 : ImageMagick vulnerabilities (USN-6200-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6200-1 advisory. It was discovered that ImageMagick incorrectly handled the -authenticate option for password-protected PDF...
CVE-2022-24447
An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export...
PT-2022-16704 · Zoho · Zoho Manageengine Admanager Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Key Manager Plus versions prior to 6200 Description: An issue was discovered in the application where a service allows a user with the level Operator to access stored SSL certificates and associated key pairs during export...
CVE-2020-6200
SAP Commerce SmartEdit Extension (versions 6.6, 6.7, 1808, 1811) is affected by a client-side AngularJS template injection vulnerability (a type of XSS) in Angular templating facilities. Root cause: improper handling of template data in the client, per the CVE-2020-6200 descriptions. Impact is XS...
Cross site scripting
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting XSS. Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A;...
CVE-2011-2523
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp...
