EUVD-2024-0149

Malicious code in bioql PyPI...

EUVD-2022-28309

Malicious code in bioql PyPI...

man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.)

...

GLSA-202509-04 : glibc: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202509-04 glibc: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

GLSA-202509-02 : Spidermonkey: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202509-02 Spidermonkey: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Spidermonkey. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

GLSA-202509-06 : ProFTPd: SSH Terrapin vulnerability

The remote host is affected by the vulnerability described in GLSA-202509-06 ProFTPd: SSH Terrapin vulnerability A vulnerability has been discovered in ProFTPd. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the...

GLSA-202509-05 : Plex Media Server: Incorrect resource transfer

The remote host is affected by the vulnerability described in GLSA-202509-05 Plex Media Server: Incorrect resource transfer A vulnerability has been discovered in glibc. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly...

GLSA-202509-03 : Django: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202509-03 Django: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Django. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fro...

Linux Distros Unpatched Vulnerability : CVE-2016-20015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for t...

Linux Distros Unpatched Vulnerability : CVE-2017-20148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because ...

Linux Distros Unpatched Vulnerability : CVE-2017-20147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing...

Linux Distros Unpatched Vulnerability : CVE-2020-36657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uptimed before 0.4.6-r1 on Gentoo allows local users with access to the uptimed user account to gain root privileges by creating a hard link within the...

Linux Distros Unpatched Vulnerability : CVE-2017-18226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary...

GLSA-202508-03 : FontForge: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202508-03 FontForge: Arbitrary Code Execution A vulnerabilitiy has been discovered in FontForge. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from t...

GLSA-202508-02 : GPL Ghostscript: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202508-02 GPL Ghostscript: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description...

GLSA-202508-04 : Mozilla Network Security Service (NSS): TLS RSA decryption timing attack

The remote host is affected by the vulnerability described in GLSA-202508-04 Mozilla Network Security Service NSS: TLS RSA decryption timing attack A vulnerability has been discovered in Mozilla Network Security Service NSS. Please review the CVE identifier referenced below for details. Tenable h...

GLSA-202508-01 : PAM: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202508-01 PAM: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in PAM. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

GLSA-202508-05 : Spreadsheet-ParseExcel: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202508-05 Spreadsheet-ParseExcel: Arbitrary Code Execution A vulnerability has been discovered in Spreadsheet::ParseExcel. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding...

GLSA-202507-10 : Roundcube: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202507-10 Roundcube: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Roundcube. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block direct...

GLSA-202507-06 : openh264: Heap Overflow

The remote host is affected by the vulnerability described in GLSA-202507-06 openh264: Heap Overflow A vulnerability has been discovered in openh264. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linu...