4770 matches found
Microsoft Outlook 2016 Multiple Vulnerabilities (KB5002427)
This host is missing an critical security update according to Microsoft KB5002427 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Outlook 2013 Service Pack 1 Multiple Vulnerabilities (KB5002432)
This host is missing an critical security update according to Microsoft KB5002432 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Description of the security update for Outlook 2013: July 11, 2023 (KB5002432)
Description of the security update for Outlook 2013: July 11, 2023 KB5002432 Summary This security update resolves a Microsoft Outlook spoofing vulnerability, and Microsoft Outlook security feature bypass vulnerability. To learn more about the vulnerabilities, see the following security advisorie...
July 11, 2023—KB5028182 (OS Build 22000.2176)
None None...
July 11, 2023—KB5028166 (OS Builds 19044.3208 and 19045.3208) - EXPIRED
None None...
PT-2023-3812 · Microsoft · Odbc Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver. This can be exploited by a remote attacker to execute arbitrary code. The vulnerability...
org.eclipse.jetty.aggregate:jetty-all (7.1.2.v20100523), org.eclipse.jetty.aggregate:jetty-all-server (7.1.2.v20100523) +21 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.1.2.v20100523)
org.eclipse.jetty:jetty-xml MAVEN version 7.1.2.v20100523 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.2.v20100523 -...
org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc1) +25 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (8.1.0.rc1)
org.eclipse.jetty:jetty-xml MAVEN version 8.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...
org.apache.geronimo.assemblies:geronimo-jetty8-javaee6 (3.0-m1), org.apache.geronimo.assemblies:geronimo-jetty8-minimal (3.0-m1) +55 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (8.0.0.m0)
org.eclipse.jetty:jetty-xml MAVEN version 8.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.apache.geronimo.assemblies:geronimo-jetty8-javaee6 3.0-m1 -...
PT-2023-25282 · Sick · Sick Icr890-4
Name of the Vulnerable Software and Affected Versions: SICK ICR890-4 affected versions not specified Description: The issue concerns cleartext storage on disk, which could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing an SD card...
Oracle Linux 9 : open-vm-tools (ELSA-2023-3948)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3948 advisory. 12.1.5-1.0.2 - CISA Major Incident CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module Tenable has extracted the preceding...
Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-24329 DESCRIPTION: Python could allow a remote attacker to bypass securit...
PT-2023-17626 · Ril · Ril
Name of the Vulnerable Software and Affected Versions: ril affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction ...
Improper Access Control
odoo is vulnerable to Improper Access Control. The vulnerability could allow an authenticated user to remotely trigger the creation of demonstration data which also includes user accounts with known credentials...
SUSE SLES15 Security Update : terraform-provider-helm (SUSE-SU-2023:2750-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2750-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block directly from the...
CVE-2023-36810 Quadratic runtime with malformed PDF missing xref marker in pypdf
pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker who uses this vulnerability can craft a PDF which leads to unexpected long runtime. This quadratic runtime blocks the current process and can utilize a single core of t...
MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?
MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...
Fedora 37 : suricata (2023-5230b1a68a)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5230b1a68a advisory. This is a security release, additionally fixing a number of important bugs. Tenable has extracted the preceding description block directly from the Fedora...
Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2020-35491 DESCRIPTION: FasterXML jackson-databind could allow a remote attack...
2023 CWE Top 25 Most Dangerous Software Weaknesses
The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2023 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesseslink is external. The CWE Top 25 is calculated by analyzing...