atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by unknown CVE via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: unknown CVE Source advisory: OSV:GHSA-26JH-R8G2-6FPR...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2024-47872 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2024-47872 Source advisory: OSV:GHSA-GVV6-33J7-884G...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2024-47870 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2024-47870 Source advisory: OSV:GHSA-XH2X-3MRM-FWQM...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2024-47868 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2024-47868 Source advisory: OSV:GHSA-4Q3C-CJ7G-JCWF...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2024-47867 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2024-47867 Source advisory: OSV:GHSA-8C87-GVHJ-XM8M...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2024-47167 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2024-47167 Source advisory: OSV:GHSA-576C-3J53-R9JJ...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2024-47165 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2024-47165 Source advisory: OSV:GHSA-89V2-PQFV-C5R9...

MAL-2024-11741 Malicious code in useregent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0c8bbc66c2a8384b2a35340f4e3204351fbeb78d88a11bec270f8e3e52b5636 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11734 Malicious code in ua-agent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7294a5078d47d2797cf31931252b823374b648a48534bc14b59cd73195cfe2f1 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in useregent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0c8bbc66c2a8384b2a35340f4e3204351fbeb78d88a11bec270f8e3e52b5636 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in ua-agent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7294a5078d47d2797cf31931252b823374b648a48534bc14b59cd73195cfe2f1 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Fedora: Security Advisory (FEDORA-2024-63f98f8c60)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-d940f25a53)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : aws (2024-d940f25a53)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d940f25a53 advisory. CVE-2024-41708: Ada Web Server did not use a cryptographically secure pseudorandom number generator. AWS.Utils.Random and AWS.Utils.RandomString used...

Fedora 40 : aws (2024-63f98f8c60)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-63f98f8c60 advisory. CVE-2024-41708: Ada Web Server did not use a cryptographically secure pseudorandom number generator. AWS.Utils.Random and AWS.Utils.RandomString used...

DrayTek Vigor 3910 security vulnerabilities

The DrayTek Vigor 3910 is a high-performance router for enterprise networks from China-based DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version 4.3.2.6 and prior versions, which originates from the Vigor Management UI's httpd server using static strings to seed OpenSSL's...

CVE-2024-9265

The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echocheckpostheadersent function. This makes it possib...

CVE-2024-9241

The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9241 PDF Image Generator <= 1.5.6 - Reflected Cross-Site Scripting

The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-9241 PDF Image Generator <= 1.5.6 - Reflected Cross-Site Scripting

The PDF Image Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...