320 matches found
CVE-2024-48937
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...
CVE-2024-44414
creationtimestamp| type| source ---|---|--- 2024-10-11 19:33:31+00:00| seen| https://t.me/cvedetector/7718...
CVE-2024-47875
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3...
CVE-2024-9737
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1350/...
CVE-2024-9759
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1356/...
CVE-2024-9717
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1377/...
CVE-2024-9747
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1344/...
CVE-2024-9762
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1358/...
CVE-2024-9741
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1346/...
CVE-2024-9764
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1362/...
CVE-2024-9719
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1379/...
CVE-2024-9730
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1381/...
CVE-2024-9767
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1371/...
CVE-2024-9745
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1347/...
Security Update for Microsoft .NET Core SDK (October 2024)
The version of .NET Core SDK installed on the remote host is 6.x prior to 6.0.35 or 8.x prior to 8.0.10. It is, therefore, affected by denial of service vulnerability as referenced in the October 2024 advisory: - .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...
Security Update for Microsoft .NET Core SDK (CVE-2024-38229) (October 2024)
The version of .NET Core SDK installed on the remote host is 8.x prior to 8.0.10. It is, therefore, affected by remote code execution vulnerability as referenced in the October 2024 advisory: - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 Note that Nessus has not test...
Security Updates for Microsoft Visio Products C2R (October 2024)
The Microsoft Visio Products are missing security updates. It is, therefore, affected by the following: - A remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
Security Update for Microsoft Power BI Report Server (October 2024)
The Microsoft Power BI Report Server on the remote host is missing the October 2024 security update. It is, therefore, affected by a server spoofing vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Security Update for Microsoft Visual Studio Code (October 2024)
The version of Microsoft Visual Studio Code installed on the remote Linux host is prior to 1.94.1. It is, therefore, affected by a remote code execution vulnerability. A remote attacker can use this to execute arbitrary commands. Note that Nessus has not tested for this issue but has instead reli...