OPENSUSE-SU-2024:13086-1 gstreamer-plugins-bad-1.22.5-2.1 on GA media

These are all security issues fixed in the gstreamer-plugins-bad-1.22.5-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11056-1 monitoring-plugins-2.3.1-3.4 on GA media

These are all security issues fixed in the monitoring-plugins-2.3.1-3.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13088-1 gstreamer-plugins-good-1.22.5-2.1 on GA media

These are all security issues fixed in the gstreamer-plugins-good-1.22.5-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11777-1 gstreamer-plugins-base-1.18.5-3.1 on GA media

These are all security issues fixed in the gstreamer-plugins-base-1.18.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13649-1 gstreamer-plugins-bad-1.22.9-1.1 on GA media

These are all security issues fixed in the gstreamer-plugins-bad-1.22.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12709-1 gstreamer-plugins-good-1.22.0-2.1 on GA media

These are all security issues fixed in the gstreamer-plugins-good-1.22.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13557-1 gstreamer-plugins-bad-1.22.8-1.1 on GA media

These are all security issues fixed in the gstreamer-plugins-bad-1.22.8-1.1 package on the GA media of openSUSE Tumbleweed...

dnf-plugins-core bug fix and enhancement update

An update is available for dnf-plugins-core. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Rocky Linux 8 : gstreamer1-plugins-bad-free (RLSA-2024:3060)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3060 advisory. gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video CVE-2023-40474 gstreamer-plugins-bad:...

AlmaLinux 9 : containernetworking-plugins (ALSA-2024:3831)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:3831 advisory. golang: net/http: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 Tenable has extracted the preceding description block directly from the AlmaLinux...

Rocky Linux 8 : gstreamer1-plugins-good (RLSA-2024:3089)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:3089 advisory. gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling CVE-2023-37327 Tenable has extracted the preceding description bloc...

(0Day) Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Famatech Advanced IP Scanner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2024-23334

Name of the Vulnerable Software and Affected Versions Famatech Advanced IP Scanner affected versions not specified Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target...

Oracle Linux 9 : containernetworking-plugins (ELSA-2024-3831)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-3831 advisory. - rebuild for CVE-2023-45290 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

containernetworking-plugins security and bug fix update

1:1.4.0-3 - rebuild for CVE-2023-45290 - Resolves: RHEL-28384...

GO-2024-2858 Grafana Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins in github.com/grafana/grafana

Grafana Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...

SUSE: Security Advisory (SUSE-SU-2024:1945-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2024-0215)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-5638

The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ticustomizernotifydismissrecommendedplugins' AJAX action in all versions up to, and including, 0.5.1 due to insufficient input sanitization and output escaping. This makes it possible fo...

SUSE SLED15: gstreamer-plugins-base / gstreamer-plugins-base-32bit / etc (SUSE-SU-2024:1945-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1945-1 advisory. - CVE-2024-4453: Fixed lack of proper validation of user-supplied data when parsing EXIF metadata...