Siemens APOGEE/TALON Field Panels

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: APOGEE PXC/TALON TC Vulnerabilities: Predictable Exact Value from Previous Values 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to hijack...

Slackware Linux 15.0 mozilla-firefox Multiple Vulnerabilities (SSA:2022-348-01)

The version of mozilla-firefox installed on the remote host is prior to 102.6.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-348-01 advisory. - An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary file...

Slackware: Security Advisory (SSA:2022-342-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2022-342-02)

The version of vim installed on the remote host is prior to 9.0.1034. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-342-02 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Heap-based Buffer Overflow in...

Slackware: Security Advisory (SSA:2022-333-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current vim Vulnerability (SSA:2022-304-01)

The version of vim installed on the remote host is prior to 9.0.0814. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-304-01 advisory. - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2022-320-03)

The version of mozilla-thunderbird installed on the remote host is prior to 102.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-320-03 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing...

Slackware Linux 15.0 / current krb5 Vulnerability (SSA:2022-320-01)

The version of krb5 installed on the remote host is prior to 1.19.2 / 1.20.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-320-01 advisory. - The Kerberos libraries used by Samba provide a mechanism for authenticating a user or service by means of tickets that can...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2022-320-02)

The version of mozilla-firefox installed on the remote host is prior to 102.5.0esr / 107.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-320-02 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timi...

Siemens JT2Go < 14.1.0.4 Multiple Vulnerabilities (SSA-120378)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 14.1.0.4. It is, therefore, affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious TIF, CGM or PDF files. If a user is tricked to open a malicious TIF, CGM or PDF...

Slackware: Security Advisory (SSA:2022-309-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current sudo Vulnerability (SSA:2022-309-01)

The version of sudo installed on the remote host is prior to 1.9.12p1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-309-01 advisory. - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that...

Slackware: Security Advisory (SSA:2022-298-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current git Multiple Vulnerabilities (SSA:2022-291-01)

The version of git installed on the remote host is prior to 2.30.6 / 2.35.5 / 2.38.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-291-01 advisory. - When relying on the --local clone optimization, Git dereferences symbolic links in the source repository...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current zlib Vulnerability (SSA:2022-288-01)

The version of zlib installed on the remote host is prior to 1.2.13. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-288-01 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field...

Slackware Linux 15.0 / current python3 Vulnerability (SSA:2022-286-01)

The version of python3 installed on the remote host is prior to 3.9.15. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-286-01 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested...

Slackware Linux 15.0 / current php Multiple Vulnerabilities (SSA:2022-273-02)

The version of php installed on the remote host is prior to 7.4.32. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-273-02 advisory. - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files,...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current dnsmasq Vulnerability (SSA:2022-269-01)

The version of dnsmasq installed on the remote host is prior to 2.87. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-269-01 advisory. - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet...

Slackware: Security Advisory (SSA:2022-266-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2022-264-01)

The version of bind installed on the remote host is prior to 9.16.33 / 9.18.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-264-01 advisory. - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the...