435 matches found
Amazon Web Services EC2 SSM enumeration
Provided AWS credentials, this module will call the authenticated API of Amazon Web Services to list all SSM-enabled EC2 instances accessible to the account. Once enumerated as SSM-enabled, the instances can be controlled using out-of-band WebSocket sessions provided by the AWS API nominally,...
SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2023:2326-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2326-1 advisory. - rebuild the package with the go 1.19 security release bsc1200441. Tenable has extracted the preceding description block...
SUSE-SU-2023:2326-1 Security update for amazon-ssm-agent
This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441...
PT-2023-36190 · Amazon · Amazon-Ssm-Agent
Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.19. The amazon-ssm-agent package has been rebuilt with this security release to address the...
SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2023:2152-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2152-1 advisory. - rebuild the package with the go 19.9 secure release bsc1200441. Tenable has extracted the preceding description block directly from the SU...
SUSE-SU-2023:2152-1 Security update for amazon-ssm-agent
This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 19.9 secure release bsc1200441...
PT-2023-36161 · Amazon · Amazon-Ssm-Agent
Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security concern that has been addressed by rebuilding the package with the go 19.9 secure release. Recommendations: At the moment, there is no informatio...
SUSE-SU-2023:1815-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issue: - rebuilt using go1.19.7 to fix bugs and security issues...
PT-2023-36140 · Amazon · Amazon-Ssm-Agent
Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to security problems that were fixed by rebuilding the software using go1.19.7, which resolved bugs and security issues. Recommendations: At the moment, there ...
CVE-2023-26912
Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...
CVE-2023-26912
Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...
Cross site scripting
Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...
CVE-2023-26912: Improper Neutralization of Input During Web Page Generation
Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...
CVE-2023-26912
Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...
CVE-2023-26912
CVE-2023-26912 describes a Cross-Site Scripting (XSS) vulnerability in xenv S-mall-ssm, triggered through the evaluate button after the commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 (Feb 17, 2020). The connected documents consistently identify the affected component as xenv S-mall-ssm , with th...
CVE-2023-26912
Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...
CVE-2022-40037
An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile...
CVE-2022-40037
An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile...