Photon OS 5.0: Linux PHSA-2024-5.0-0407

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0407. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-10039 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-config-cli...

CVE-2024-21539 vulnerabilities

Vulnerabilities for packages: eslint...

kernel-devel-6.11.8-1.1 on GA media (moderate)

kernel-devel-6.11.8-1.1 on GA media Announcement ID: openSUSE-SU-2024:14500-1 Rating: moderate Cross-References: CVE-2023-52917 CVE-2024-46869 CVE-2024-47671 CVE-2024-47675 CVE-2024-47676 CVE-2024-47677 CVE-2024-47678 CVE-2024-47679 CVE-2024-47680 CVE-2024-47681 CVE-2024-47682 CVE-2024-47683...

CVE-2024-38370

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without appropriate rights. Upgrade to 10.0.16...

Citrix Session Recording Security Bulletin for CVE-2024-8068 and CVE-2024-8069

Description of Problem A vulnerability has been discovered in Citrix Session Recording. Refer below for further details: Affected Versions The following supported versions of Citrix Session Recording are affected by the vulnerability: Current Release CR Citrix Session Recording before 2407 hotfix...

CVE-2024-10977 vulnerabilities

Vulnerabilities for packages: postgresql...

CVE-2024-52549 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-XJ7W-R753-VJ8V

creationtimestamp| type| source ---|---|--- 2024-11-13 13:40:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113475925311367276...

CVE-2024-11168 vulnerabilities

Vulnerabilities for packages: python...

CVE-2024-11116 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11117 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11111 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11114 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-11115 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-47535 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, sonarqube, keycloak, seata, apicurio-registry, zookeeper-fips, celeborn...

KB5046682: Windows Server 2012 R2 Security Update (November 2024)

The remote Windows host is missing security update 5046682. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Remote Code Execution Vulnerability CVE-2024-43639 - Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2024-43623 - Windows Telephony Service Elevation...

Fedora 40 : buildah / podman (2024-054752ae69)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-054752ae69 advisory. Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676. Tenable has extracted the preceding description block directly from the Fedora...

[SECURITY] [DSA 5809-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5809-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 11, 2024 https://www.debian.org/security/faq -...

CVE-2024-43432

A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs...