7044 matches found
Foxit PDF Editor for Mac < 2024.2 Vulnerability
According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 2024.2. It is, therefore affected by vulnerability: Note that Nessus has not tested for this issue but has instead relied only on the...
RHEL 7 : docker (RHSA-2024:1270)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1270 advisory. Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that runs...
RHEL 6 / 7 : python27-python (RHSA-2019:3948)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3948 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high leve...
Dell Repository Manager logger module directory traversal vulnerability
Dell Repository Manager is a suite of Dell USA's Dell Repository Manager ensures that Dell PowerEdge servers have the latest BIOS, drivers, firmware, and software. A directory traversal vulnerability exists in the Dell Repository Manager logger module, which can be exploited by a local attacker t...
RHEL 8 : Release of OpenShift Serverless Client kn 1.21.1 (Low) (RHSA-2022:1291)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:1291 advisory. Red Hat OpenShift Serverless Client kn 1.21.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.21.1. The kn CLI is delivered as an RPM...
RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2018:0584)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0584 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
APT28 Exploits Windows Print Spooler Flaw with GooseEgg
...
RHEL 7 : qemu-kvm-rhev (RHSA-2016:2706)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2706 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...
CVE-2023-35633
creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-10-25 17:30:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/10/the-windows-registry-adventure-4-hives.html 2024-12-19...
CVE-2024-26842
The CVE-2024-26842 issue is a Linux kernel vulnerability in the SCSI UFS host controller code (ufshcd_clear_cmd). In MCQ mode, when task_tag >= 32 and sizeof(unsigned int) == 4, 1U <
Electrolink FM/DAB/TV Transmitter
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Electrolink Equipment : FM/DAB/TV Transmitter Vulnerabilities : Authentication Bypass by Assumed-Immutable Data, Reliance on Cookies without Validation and...
PT-2024-6169 · Microsoft · Outlook
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook version 16.83.3 Description: A library injection vulnerability exists in Microsoft Outlook. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could...
KLA65636 Multiple vulnerabilities in Oracle Java SE and GraalVM
Multiple vulnerabilities were found in Oracle Java SE and GraalVM. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. Code execution vulnerability in JavaFX can be...
Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability
Palo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation in the wild. Tracked as CVE-2024-3400 CVSS score: 10.0, the critical vulnerability is a case of command injection in the GlobalProtect feature tha...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400 Compromise Checker A very simple bash script to...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400 Compromise Checker A very simple bash script to...
KLA65600 OSI vulnerability in FileZilla
Information disclosure vulnerability was found in FileZilla. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories oss-security – CVE-2024-31497: Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces in PuTTY Client Exploitation...
CVE-2024-3400
creationtimestamp| type| source ---|---|--- 2024-04-12 07:56:06+00:00| seen| https://www.cert.at/de/warnungen/2024/4/palo-alto-cve-2024-3400 2024-04-12 08:26:41+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus12/2024 2024-04-12 09:52:38+00:00| published-proof-of-concept|...
SUSE SLES12 Security Update : texlive-specs-k (SUSE-SU-2024:1203-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1203-1 advisory. CVE-2016-10243: Fixed arbitrary code execution via mpost during TeX document compilation bsc1028271 Tenable has extracted the preceding...
Unauthenticated Stored Cross-Site Scripting Vulnerability Patched in WordPress Core
WordPress 6.5.2 was released yesterday, on April 9, 2024. It included a single security patch, along with a handful of bug fixes. The security patch was for a Stored Cross-Site Scripting vulnerability that could be exploited by both unauthenticated users, when a comment block is present on a page...