AZL-53579 CVE-2024-52616 affecting package avahi for versions less than 0.8-5

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

Broadcom SANnav log information leakage vulnerability

Broadcom SANnav is a suite of SAN management platforms from Broadcom USA. A log information disclosure vulnerability exists in Broadcom SANnav versions prior to 2.2.2, which stems from the printing of Fabric OS switch passwords and authorization IDs in an embedded MLS database file, which could...

Authentik security vulnerabilities

authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik that stems from the presence of an insecure default configuration of OAuth2 redirect URIs, which could allow an attacker to gain undue privileges or perform...

PHP 8.1.x < 8.1.31 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.1.31. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.1.31 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

PHP 8.3.x < 8.3.14 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.3.14. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.14 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CVE-2024-11477

creationtimestamp| type| source ---|---|--- 2024-11-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1532/ 2024-11-22 16:40:16+00:00| seen| https://t.me/truesecator/6464 2024-11-23 09:01:40+00:00| exploited| https://t.me/kasperskyb2b/1513 2024-11-23 12:18:03+00:00| seen...

CVE-2024-51654

creationtimestamp| type| source ---|---|--- 2024-11-19 20:07:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113511422829160724...

Qualys TRU Uncovers Five Local Privilege Escalation Vulnerabilities in needrestart

The Qualys Threat Research Unit TRU has identified five Local Privilege Escalation LPE vulnerabilities within the needrestart component, which is installed by default on Ubuntu Server. These vulnerabilities can be exploited by any unprivileged user to gain full root access without requiring user...

On November 13, NIST NVD finally admitted the obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year (September 30)

On November 13, NIST NVD finallyadmittedthe obvious: they had failed to process the CVE analysis backlog before the end of the fiscal year September 30. This is actually visible in their own statistics. At the moment, there are 19860 identifiers in the backlog. This week, 1136 new CVEs were...

SUSE CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

Oracle Linux 9 : bluez (ELSA-2024-9413)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9413 advisory. 5.72-2 - Bump release to rebuild for RHEL-9.5 5.72-1 - Update to 5.72 Tenable has extracted the preceding description block directly from the Oracle...

Race Condition

Overview python-openstackclient is an OpenStack Command-line Client Affected versions of this package are vulnerable to Race Condition due to an improper handling of non-existing identifiers. An attacker can inadvertently cause the deletion of valid access rules by attempting to delete non-existe...

GLSA-202411-08 : X.Org X server, XWayland: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202411-08 X.Org X server, XWayland: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details. Tenable has extracted the...

GLSA-202411-09 : Perl: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202411-09 Perl: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...

[SECURITY] [DLA 3953-1] icinga2 security update

Debian LTS Advisory DLA-3953-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert November 16, 2024 https://wiki.debian.org/LTS Package : icinga2 Version : 2.12.3-1+deb11u1 CVE ID : CVE-2021-32739 CVE-2021-32743 CVE-2021-37698 CVE-2024-49369 Debian Bug : 991494 108738...

Photon OS 4.0: Linux PHSA-2024-4.0-0711

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0711. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2024-35347

Name of the Vulnerable Software and Affected Versions Nextcloud Tables versions prior to 0.8.1 Description The issue concerns the sharing of table information in Nextcloud Tables, where the details about which table identified by a numeric ID is shared with specific groups and users, along with t...

Fedora 37 : freerdp (2022-076b1c9978)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-076b1c9978 advisory. Update to 2.9.0 CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347. Tenable has...

Fedora 41 : firefox (2024-1d8785c391)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1d8785c391 advisory. - New upstream builds 131.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:3985-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3985-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were...