EUVD-2022-49724

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-47090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS CVE-2024-47090 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2024-38866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection CVE-2024-38866 Note that Nessus relies on the presence o...

Debian: Security Advisory (DLA-4233-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4233-1] nagvis security update

Debian LTS Advisory DLA-4233-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert June 28, 2025 https://wiki.debian.org/LTS Package : nagvis Version : 1:1.9.25-2+deb11u2 CVE ID : CVE-2024-38866 CVE-2024-47090 Debian Bug : 1106686 Multiple vulnerabilities were discover...

Debian dla-4233 : nagvis - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4233 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4233-1 [email protected]...

DLA-4233-1 nagvis - security update

Bulletin has no description...

DEBIAN-CVE-2024-47090

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-47090

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-38866

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

DEBIAN-CVE-2024-38866

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

UBUNTU-CVE-2024-47090

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

UBUNTU-CVE-2024-38866

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

CVE-2024-47090 XSS via WYSIWYG editor

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-47090 XSS via WYSIWYG editor

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-47090 XSS via WYSIWYG editor

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-47090

CVE-2024-47090 affects Nagvis prior to version 1.9.47 and allows an XSS via the WYSIWYG editor (improper input neutralization). Connected sources confirm Debian/Debian LTS advisory DLA-4233-1 fixes this issue in Debian 11 with Nagvis package 1:1.9.25-2+deb11u2. The Nessus entry also references an...

CVE-2024-47090

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-38866 Livestatus Injection in dynmaps

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

CVE-2024-38866

CVE-2024-38866 affects Nagvis prior to 1.9.47, with vulnerability described as improper neutralization of input that enables livestatus injection. The initial entry provides CVSS metrics (NVD 7.5/High; in some sources CVSS 3.1) and a Debian LTS advisory noting fixes in Nagvis 1.9.25-2+deb11u2 for...