UBUNTU-CVE-2024-42332

The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attac...

PT-2024-22445 · Undefined · Undefined

CISA adds Array Networks CVE-2023-28461 to its KEV Catalog CISAKEV ArrayNetworks CVE-2024-28461 https://t.co/VGDdBgd86q...

PT-2024-10612 · Touchpal · Touch Pal

Name of the Vulnerable Software and Affected Versions: Touch Pal application affected versions not specified Description: The issue concerns a wrong configuration in the Touch Pal application that can lead to the collection of user behavior data without the user's awareness. Recommendations: At t...

GitLab 16.9.8 < 17.4.5 / 17.5 < 17.5.3 / 17.6 < 17.6.1 (CVE-2024-11669)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Incorrect Authorization in GitLab CVE-2024-11669 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

GitLab 13.2.4 < 17.4.5 / 17.5 < 17.5.3 / 17.6 < 17.6.1 (CVE-2024-11828)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Inefficient Algorithmic Complexity in GitLab CVE-2024-11828 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

deno (>=1.3.1, <=1.31.3), easyops_deno (>=1.12.2, <=1.13.0) potentially affected by CVE-2024-32468 via deno_doc (>=0.1.5, <=0.57.0)

denodoc CARGO version =0.1.5, =1.3.1, =1.12.2, =1.13.0 Source cves: CVE-2024-32468 Source advisory: OSV:GHSA-QQWR-J9MM-FHW6...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28461link is external Array Networks AG and vxAG ArrayOS Improper Authentication Vulnerability These types of vulnerabilities are frequent attack vectors for...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308link is external Apple Multiple Products Code Execution Vulnerability CVE-2024-44309link is external Apple Multiple Products Cross-Site Scripting XSS...

PT-2024-17086 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. It requires user interaction, where the target must visit a malicious page or open a...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38812link is external VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38813link is external VMware vCenter Server Privilege Escalation...

CVE-2023-44270

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...

PT-2024-35682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the handling of NONHEAD !delta1 lclusters in the erofs filesystem. The issue was reported by syzbot, which found a WARNI...

PT-2024-16899 · Trcore · Dvc

Name of the Vulnerable Software and Affected Versions: DVC from TRCore affected versions not specified Description: The issue concerns the use of a hardcoded key for file encryption in the DVC from TRCore. This hardcoded key can be exploited by attackers to decrypt the files and restore their...

Fedora 41 : cjson (2024-82f3634c69)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-82f3634c69 advisory. Update to new upstream version closes rhbz2237124 Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2024-11214

A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be initiated remotely...

webkitgtk: type confusion may lead to arbitrary code execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution due to a type confusion issue. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

webkitgtk: Arbitrary Remote Code Execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

Fedora 41 : expat (2024-671549e74c)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-671549e74c advisory. Rebase to version 2.6.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 37 : elixir (2022-be7abff81b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-be7abff81b advisory. Small bugfix release - no breaking changes here. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 41 : libdigidocpp (2024-f474f99541)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f474f99541 advisory. - Upstream release of libdigidocpp Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...