Adobe Photoshop 24.x < 24.7.5 / 25.x < 25.12 Multiple Vulnerabilities (APSB24-72)

The version of Adobe Photoshop installed on the remote Windows host is prior to 24.7.5/25.12. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-72 advisory. - Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability...

NewStart CGSL MAIN 6.02 : libsepol Multiple Vulnerabilities (NS-SA-2024-0054)

The remote NewStart CGSL host, running version MAIN 6.02, has libsepol packages installed that are affected by multiple vulnerabilities: - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper. CVE-2021-36084 - The...

NewStart CGSL MAIN 6.02 : vim Multiple Vulnerabilities (NS-SA-2024-0065)

The remote NewStart CGSL host, running version MAIN 6.02, has vim packages installed that are affected by multiple vulnerabilities: - A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The...

Siemens User Management Component (UMC)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

openSUSE Security Advisory (SUSE-SU-2024:3114-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: ffmpeg / ffmpeg-private-devel / libavcodec-devel / libavcodec57 / etc (SUSE-SU-2024:3114-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3114-1 advisory. - CVE-2020-22027: Fixed heap-based Buffer Overflow vulnerability exits in deflate16 at...

openSUSE Security Advisory (SUSE-SU-2024:3079-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:3078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3114-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2020-22027: Fixed heap-based Buffer Overflow vulnerability exits in deflate16 at libavfilter/vfneighbor.c bsc1186607 - CVE-2021-38291: Fixed an assertion failure at src/libavutil/mathematics.c bsc1189428 - CVE-2023-51798: Fixed floating poi...

SUSE SLED15: libQt53DAnimation-devel / libQt53DAnimation5 / libQt53DCore-devel / etc (SUSE-SU-2024:3079-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3079-1 advisory. - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228204 Other...

EulerOS Virtualization 2.12.0 : qemu (EulerOS-SA-2024-2341)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both s-datacount and the size ...

SUSE SLES15: libQt5Quick3D5 / libQt5Quick3DAssetImport5 / libqt5-qtquick3d-devel / etc (SUSE-SU-2024:3078-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3078-1 advisory. - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228199 Other fixes: - Fix progressive...

Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-2310)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libyaml (EulerOS-SA-2024-2330)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.12.1 : libyaml (EulerOS-SA-2024-2310)

According to the versions of the libyaml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...

EulerOS Virtualization 2.12.0 : libyaml (EulerOS-SA-2024-2330)

According to the versions of the libyaml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function...

openSUSE Security Advisory (SUSE-SU-2024:2984-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for libqt5 (SUSE-SU-2024:2976-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : mcpp -- Heap-based buffer overflow (6e8b9c75-6179-11ef-8a7d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6e8b9c75-6179-11ef-8a7d-b42e991fc52e advisory. [email protected] reports: MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2024-2281)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...