20620 matches found
NextScripts: Social Networks Auto-Poster < 4.4.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
Description The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTTPUSERAGENT header in all versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...
Tenable Nessus Agent Multiple Vulnerabilities (TNS-2024-09)
Tenable Nessus Agent is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessusagent";...
CVE-2024-35195 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, py3-cassandra-medusa, py3-pipenv, kubeflow-pipelines-visualization-server, airflow, kubeflow-volumes-web-app, kubeflow-pipelines, mlflow, superset, jwt-tool, reflex, patroni, ggshield, request-1276, az, nvidia-nsight-compute-13.1, kubeflow-katib,...
GHSA-F98P-2HC5-FM7V AVideo cross-site scripting vulnerability in the view/about.php page
The PHP file view/about.php is vulnerable to an XSS issue due to no sanitization of the user agent. At line 53, the website gets the user-agent from the headers through $SERVER'HTTPUSERAGENT' and echo it without any sanitization. In PHP, echo a user generated statement, here the User-Agent Header...
AVideo cross-site scripting vulnerability in the view/about.php page
The PHP file view/about.php is vulnerable to an XSS issue due to no sanitization of the user agent. At line 53, the website gets the user-agent from the headers through $SERVER'HTTPUSERAGENT' and echo it without any sanitization. In PHP, echo a user generated statement, here the User-Agent Header...
Passbolt Api E-mail HTML injection
Passbolt sends e-mail to users to warn them about different type of events such as the creation, modification or deletion of a password. Those e-mails may contain user-specified input, such as a password’s title or description. Passbolt does not escape the user’s input properly, resulting in the...
CVE-2024-3292
A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. - CVE-2024-3292...
CVE-2024-3292
CVE-2024-3292 Details (mode C) Affected product: Tenable Nessus Agent running on Windows.Root cause: Race condition that allows an authenticated, local attacker to modify installation parameters during installation.Impact: Could lead to execution of arbitrary code on the Nessus host (high impact ...
CVE-2024-3292 Race Condition
A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. - CVE-2024-3292...
CVE-2024-3292 Race Condition
A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. - CVE-2024-3292...
CVE-2024-3291
When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default...
CVE-2024-3291
Nessus Agent on Windows prior to version 10.6.4 is vulnerable to local privilege escalation due to insecure permissions in sub-directories when installed to a non-default directory. The issue is documented as CVE-2024-3291 and is addressed by Nessus Agent 10.6.4 (and later). Affected installation...
CVE-2024-3291 Privilege Escalation
When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default...
CVE-2024-3291 Privilege Escalation
When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default...
Tenable Nessus Agent < 10.6.4 Multiple Vulnerabilities (TNS-2024-09)
According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 10.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-09 advisory. - Two separate vulnerabilities were discovered, reported and fixed:When installing Ness...
Tenable Network Security Nessus 安全漏洞
The Tenable Network Security Nessus Agent is a component of the Nessus Vulnerability Scanning Tool developed by Tenable to extend scanning capabilities to other devices on the network. A competitive condition vulnerability exists in the Tenable Network Security Nessus Agent, which can be exploite...
Tenable Network Security Nessus 安全漏洞
The Tenable Network Security Nessus Agent is a component of the Nessus Vulnerability Scanning Tool developed by Tenable to extend scanning capabilities to other devices on the network. An elevation of privilege vulnerability exists in Tenable Network Security Nessus Agent that stems from a failur...
PT-2024-24963 · Tenable · Nessus Agent
Name of the Vulnerable Software and Affected Versions: Nessus Agent versions prior to 10.6.4 Description: The issue concerns the installation of Nessus Agent to a non-default directory on a Windows host, where secure permissions for sub-directories were not enforced in versions prior to 10.6.4...