[R1] Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202407.1

R1 Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202407.1 Arnie Cabral Tue, 07/09/2024 - 08:33 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components PHP was found to contain...

MAL-2024-5963 Malicious code in sc-concurrent-log-handler (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sc-concurrent-log-handler (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-35743

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

CVE-2024-35743 WordPress SC filechecker plugin <= 0.6 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

CVE-2024-35743 WordPress SC filechecker plugin <= 0.6 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

CVE-2024-35743

Technical details are not publicly available in the provided documents for CVE-2024-35743. Monitor for updates on affected product/version, root cause, impact, and remediation as more authoritative disclosures become available.

WordPress SC filechecker plugin <= 0.6 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by YCInfosec Patchstack Alliance in WordPress Plugin SC filechecker versions = 0.6...

WordPress SC filechecker Plugin <= 0.6 is vulnerable to Arbitrary File Deletion

Software SC filechecker Type Plugin Vulnerable versions = 0.6 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2024-35743 Patch priority Low CVSS severity Low 8.6 Developer Claim ownership PSID 308e99f1ec04 Credits YCInfosec Required privilege...

[SECURITY] Fedora 40 Update: qt5-qtscxml-5.15.14-1.fc40

The Qt SCXML module provides functionality to create state machines from SCXM L files. This includes both dynamically creating state machines loading the SCXML file and instantiating states and transitions and generating a C++ file that has a class implementing the state machine. It also contains...

Malicious code in sc-chimer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f470aa8655a172b4c57dcceec010741d839640839045d16030fc0b1e0728722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-chimerra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a106b927a97b76a0d2cbd0b8a5b6b03bd325ff075a0747b3d0f370b62f0d691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1351 Malicious code in sc-chimerra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a106b927a97b76a0d2cbd0b8a5b6b03bd325ff075a0747b3d0f370b62f0d691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-chimeraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4626fc57714041286c4d134ad1b96055b5d5ae22d6d918906506d76b8df027aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1349 Malicious code in sc-chimer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f470aa8655a172b4c57dcceec010741d839640839045d16030fc0b1e0728722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Stack-based Buffer Overflow (CVE-2023-5401)

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Heap-based Buffer Overflow (CVE-2023-5400)

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Improper Handling of Length Parameter Inconsistency (CVE-2023-5393)

Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and...

Tenable Security Center Multiple Vulnerabilities (TNS-2024-06)

According to its self-reported version, the Tenable Security Center running on the remote host is . It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-06 advisory. - Security Center leverages third-party software to help provide underlying functionality. One of t...

CVE-2024-29273

Affected software: dzzoffice 2.02.1 SC UTF8. Vulnerability: Stored XSS via an SVG payload uploaded to uploadfile/index.php, exploiting insufficient input filtering/escaping. Impact: could allow execution of arbitrary script in the victim’s browser (per CVE description; CVSS base 6.1, UI: Required...