git: exposure of sensitive information to a malicious actor

Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone where the source and target of the clone...

F5 Networks BIG-IP TCP profile vulnerability (K000134652)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K000134652 advisory. When TCP Verified Accept is enabled on a TCP profile that is configured on a virtual server, undisclosed...

Android Automotive OS Update Bulletin—October 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-10-05 or later from the October 2023 Android Security Bulletin in addition to all issues in thi...

Ubuntu 23.04 : libppd vulnerability (USN-6392-1)

The remote Ubuntu 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6392-1 advisory. It was discovered that libppd incorrectly parsed certain Postscript objects. If a user or automated system were tricked into printing a specially crafted document, a...

CentOS 8 : php:8.0 (CESA-2022:7624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7624 advisory. - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625...

CVE-2022-39253

Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone where the source and target of the clone...

NewStart CGSL CORE 5.05 / MAIN 5.05 : python Vulnerability (NS-SA-2021-0152)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has python packages installed that are affected by a vulnerability: - In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because procpa...

Juniper Junos OS Buffer Overflow (JSA11142)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11142 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. TRUSTED...

CentOS 8 : grafana (CESA-2021:1859)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1859 advisory. - grafana: XSS via a query alias for the Elasticsearch and Testdata datasource CVE-2020-24303 - crewjam/saml: authentication bypass in saml...

Fedora 32 : libpq / postgresql (2021-3db6876545)

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-3db6876545 advisory. - Update to the latest upstream release. FEDORA-2021-3db6876545 Note that Nessus has not tested for this issue but has instead relied only on the application...

Solaris 10 (sparc) : 119213-31

NSSNSPRJSS 3.17.2: NSPR 4.10.7 / NSS 3.1. Date this patch was last updated by Sun : Feb/19/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

lens-shop.de XSS vulnerability

Vulnerable URL: https://www.lens-shop.de/advancedsearchresult.php?keywords=%3Cscript%3Ealert1%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 03.01.2018 Latest check for patch:| 03.01.2018 14:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

login.aliexpress.com Open Redirect vulnerability

Vulnerable URL: https://login.aliexpress.com/xman/xlogout.htm?returnurl=http://f01.s.alicdn.com/kf/HTB1R1OTb7fbuJjSsD4OxiqiFXaB.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

fme.vutbr.cz XSS vulnerability

Vulnerable URL: https://www.fme.vutbr.cz/prdetail.html?pid=1567〈=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

cbengine.com XSS vulnerability

Vulnerable URL: http://cbengine.com/search.html?c1v=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 28.11.2017 Latest check for patch:| 28.11.2017 13:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

infoo.se XSS vulnerability

Vulnerable URL: http://infoo.se/sok.html?string=toto%3Cimg%20src=x%20onerror=%22alertdocument.domain%22%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

loginella.com XSS vulnerability

Vulnerable URL: http://www.loginella.com/a/'%7D%7D%7D;alert'XSSPOSED';function%7Bxz=%7Bx:%7By:'x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 325527 VIP website status:| No...

aku.edu XSS vulnerability

Vulnerable URL: https://www.aku.edu/Pages/home.aspx?a=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 58324 VIP website status:| No...

physicianreports.cardiooptions.com XSS vulnerability

Vulnerable URL: https://physicianreports.cardiooptions.com/pass/passcheck.php?studyid=&username.op;=eq=&password.op;=eq=boi=Enter Name Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

blogdofaria.com.br Open Redirect vulnerability

Vulnerable URL: http://www.blogdofaria.com.br/page/16/?adsclick=1=1107-1104-0-1103-2=f147c8be15=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alex...