AZL-53579 CVE-2024-52616 affecting package avahi for versions less than 0.8-5

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

Broadcom SANnav log information leakage vulnerability

Broadcom SANnav is a suite of SAN management platforms from Broadcom USA. A log information disclosure vulnerability exists in Broadcom SANnav versions prior to 2.2.2, which stems from the printing of Fabric OS switch passwords and authorization IDs in an embedded MLS database file, which could...

Authentik security vulnerabilities

authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik that stems from the presence of an insecure default configuration of OAuth2 redirect URIs, which could allow an attacker to gain undue privileges or perform...

PHP 8.3.x < 8.3.14 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.3.14. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.14 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

PHP 8.1.x < 8.1.31 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.1.31. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.1.31 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CVE-2024-11477

creationtimestamp| type| source ---|---|--- 2024-11-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1532/ 2024-11-22 16:40:16+00:00| seen| https://t.me/truesecator/6464 2024-11-23 09:01:40+00:00| exploited| https://t.me/kasperskyb2b/1513 2024-11-23 12:18:03+00:00| seen...

CVE-2024-51654

creationtimestamp| type| source ---|---|--- 2024-11-19 20:07:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113511422829160724...

Qualys TRU Uncovers Five Local Privilege Escalation Vulnerabilities in needrestart

The Qualys Threat Research Unit TRU has identified five Local Privilege Escalation LPE vulnerabilities within the needrestart component, which is installed by default on Ubuntu Server. These vulnerabilities can be exploited by any unprivileged user to gain full root access without requiring user...

On November 13, NIST NVD finally admitted the obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year (September 30)

On November 13, NIST NVD finallyadmittedthe obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year September 30. This is actually visible in their own statistics. At the moment, there are 19860 identifiers in the backlog. This week, 1136 new CVEs were...

SUSE CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

Oracle Linux 9 : bluez (ELSA-2024-9413)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9413 advisory. 5.72-2 - Bump release to rebuild for RHEL-9.5 5.72-1 - Update to 5.72 Tenable has extracted the preceding description block directly from the Oracle...

Race Condition

Overview python-openstackclient is an OpenStack Command-line Client Affected versions of this package are vulnerable to Race Condition due to an improper handling of non-existing identifiers. An attacker can inadvertently cause the deletion of valid access rules by attempting to delete non-existe...

GLSA-202411-09 : Perl: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202411-09 Perl: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...

GLSA-202411-08 : X.Org X server, XWayland: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202411-08 X.Org X server, XWayland: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details. Tenable has extracted the...

[SECURITY] [DLA 3953-1] icinga2 security update

Debian LTS Advisory DLA-3953-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert November 16, 2024 https://wiki.debian.org/LTS Package : icinga2 Version : 2.12.3-1+deb11u1 CVE ID : CVE-2021-32739 CVE-2021-32743 CVE-2021-37698 CVE-2024-49369 Debian Bug : 991494 108738...

PT-2024-35347

Name of the Vulnerable Software and Affected Versions Nextcloud Tables versions prior to 0.8.1 Description The issue concerns the sharing of table information in Nextcloud Tables, where the details about which table identified by a numeric ID is shared with specific groups and users, along with t...

Fedora 37 : freerdp (2022-076b1c9978)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-076b1c9978 advisory. Update to 2.9.0 CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347. Tenable has...

Photon OS 4.0: Linux PHSA-2024-4.0-0711

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0711. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 37 : curl (2022-e9d65906c4)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e9d65906c4 advisory. - url: use IDN decoded names for HSTS checks CVE-2022-42916 - httpproxy: restore the protocol pointer on error CVE-2022-42915 - netrc: replace fgets...

Fedora 37 : xen (2022-9f51d13fa3)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9f51d13fa3 advisory. x86: Multiple speculative security issues XSA-422, CVE-2022-23824 ---- x86: unintended memory sharing between guests XSA-412, CVE-2022-42327 Xenstor...