PT-2024-15561 · WordPress · Password Protect

Name of the Vulnerable Software and Affected Versions: Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease versions up to, and including, 2.6.6 Description: The issue allows authenticated attackers with subscriber access or higher to extract post titles and...

Apache Airflow 信任管理问题漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A trust management issue vulnerability exists in Apache Airflow FTP Provider versio...

PT-2024-2799 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Secure Boot protocol in Windows operating systems, specifically due to insufficient input validation. This allows a remote attacker to bypa...

jshERP SQL Injection Vulnerability

jshERP Huaxia ERP is a homegrown ERP system by the personal developer of Ji Sheng Hua in China. A SQL injection vulnerability exists in jshERP v3.3. An attacker can exploit this vulnerability to build a malicious payload to bypass jshERP's protection mechanism...

CVE-2024-20263

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

RHEL 9 : python3.9 (RHSA-2024:0466)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0466 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

Fedora 39 : python3.10 (2023-c61a7d5227)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c61a7d5227 advisory. Security fix for CVE-2023-27043. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2023-6355

Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b distributed in 9.00.1507 MR1, 8.90 prior to vCR8.90.231204a distributed in...

Gallagher Controller 7000 Security Vulnerability

Gallagher Controller 7000 is a powerful network connectivity controller from Gallagher New Zealand. A security vulnerability exists in Gallagher Controller 7000 that originated from allowing an attacker to bypass the protection mechanism to enable local debugging. Affected products and versions:...

CVE-2023-5553

During internal Axis Security Development Model ASDM threat-modelling, a flaw was found in the protection for device tampering commonly known as Secure Boot in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the...

The vulnerability of Trend Micro Apex One and Apex One as a Service anti-virus software lies in the possibility of bypassing the protection mechanisms, allowing attackers to execute arbitrary code with system privileges.

The vulnerability of Trend Micro Apex One and Apex One as a Service antivirus programs relates to the possibility of bypassing protection mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with system privileges by uploading the malicious file to the...

Webroot Secure Anywhere 安全漏洞

Webroot Secure Anywhere is a comprehensive antivirus program from Webroot USA. A security vulnerability exists in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and prior versions, which stems from a vulnerability that allows a local attacker to bypass the protection via a crafted...

GLSA-202305-16 : Vim, gVim: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-16 Vim, gVim: Multiple Vulnerabilities - Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646. CVE-2022-1154 - heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...

Fedora 36 : lilypond / lilypond-doc (2023-6edb8fab0d)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-6edb8fab0d advisory. Fix for CVE-2020-17354 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fastify Fastify-csrf 跨站请求伪造漏洞

Fastify Fastify-csrf is a Fastify community based on Javascript can provide CSRF protection for Fastify plugin . A cross-site request forgery vulnerability exists in Fastify Fastify-csrf. An attacker can exploit this vulnerability to bypass the cross-site request forgery protection mechanism...

PT-2023-21871

Name of the Vulnerable Software and Affected Versions Nextcloud Android versions 3.7.0 through 3.24.0 Description The Nextcloud Android app has a security issue that allows an attacker with access to an unlocked physical device to bypass the Pin/passcode protection using a third-party app. This...

CBL Mariner 2.0 Security Update: vim (CVE-2022-1621)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1621 advisory. - Heap buffer overflow in vimstrncpy findword in GitHub repository vim/vim prior to 8.2.4919. This vulnerability i...

CBL Mariner 2.0 Security Update: vim (CVE-2022-1381)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1381 advisory. - global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is...

The vulnerability of the isolated software environment of the Avast Antivirus protection tool allows a malicious actor to manipulate scan results. In other words, they can bypass the protection by avoiding detection or removing the malicious system files.

The vulnerability of the isolated software environment of the antivirus software Avast Antivirus is related to incorrect default permissions. Exploiting this vulnerability allows a hacker to manipulate scan results, i.e., to bypass protection by avoiding detection or removing malicious system fil...

CVE-2023-25147

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process. Please note: an attacker must first obtain administrative access on t...