Fedora: Security Advisory (FEDORA-2024-ee9f0f22b6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : prometheus-podman-exporter (2024-69528c0ba6)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-69528c0ba6 advisory. release 1.13.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

[SECURITY] Fedora 41 Update: prometheus-podman-exporter-1.13.3-1.fc41

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

GHSA-79JV-5226-783F OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand

Summary The export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains embedded JavaScript code. This code would then ...

OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand

Summary The export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains embedded JavaScript code. This code would then ...

Malicious code in otlp-grpc-exporter-base (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9748 Malicious code in otlp-grpc-exporter-base (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9612 Malicious code in exporter-trace-otlp-proto (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in exporter-trace-otlp-proto (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in exporter-trace-otlp-http (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9611 Malicious code in exporter-trace-otlp-http (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: confluent-kafka, solr, zookeeper, strimzi-kafka-operator, cloudwatch-exporter, apache-nifi, cassandra-reaper, druid...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, apache-tika, apache-nifi, zookeeper-fips, confluent-kafka, strimzi-kafka-operator, solr, spark, druid, spark-fips, celeborn, cloudwatch-exporter, kafka, zookeeper, cassandra-reaper...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: confluent-kafka, solr, zookeeper, strimzi-kafka-operator, cloudwatch-exporter, apache-nifi, cassandra-reaper, druid...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, apache-tika, apache-nifi, zookeeper-fips, confluent-kafka, strimzi-kafka-operator, solr, spark, druid, spark-fips, celeborn, cloudwatch-exporter, kafka, zookeeper, cassandra-reaper...

GHSA-586P-749J-FHWP vulnerabilities

Vulnerabilities for packages: buildah...

GHSA-586P-749J-FHWP vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, buildah...

CVE-2024-9675 vulnerabilities

Vulnerabilities for packages: buildah...

CVE-2024-9675 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, buildah...

CVE-2024-8793

The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.7.2.1. This makes ...