SUSE SLED15: grpc-devel / grpc-source / libgrpc++1_60 / libgrpc1_60 / libgrpc37 / etc (SUSE-SU-2024:4401-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4401-1 advisory. - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: trino, cassandra-reaper, kserve-modelmesh, apache-nifi, thingsboard, dependency-track, zookeeper-fips, tez, ontop, akhq, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, sonarqube, management-api-for-apache-cassandra-4.0, cassandra,...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: trino, cassandra-reaper, kserve-modelmesh, apache-nifi, thingsboard, dependency-track, zookeeper-fips, tez, ontop, akhq, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, sonarqube, management-api-for-apache-cassandra-4.0, cassandra,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: trino, cassandra-reaper, kserve-modelmesh, apache-nifi, thingsboard, dependency-track, zookeeper-fips, tez, ontop, akhq, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, sonarqube, management-api-for-apache-cassandra-4.0, cassandra,...

Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix , a powerful commercial web app vulnerability scanner, new research finds. The cracked software is being resold as a cloud-based attack tool by at least two different services...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: trino, cassandra-reaper, kserve-modelmesh, apache-nifi, thingsboard, dependency-track, zookeeper-fips, tez, ontop, akhq, cassandra-fips, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, sonarqube, management-api-for-apache-cassandra-4.0, cassandra,...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-36621)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36621 advisory. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The...

Mattermost Server 9.5.x < 9.5.12, 9.11.x < 9.11.4, 10.0.x < 10.0.2, 10.1.x < 10.1.2, 10.2.0 (MMSA-2024-00386)

The version of Mattermost Server installed on the remote host is prior to 9.5.12, 9.11.4, 10.0.2, 10.1.2 or 10.2.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00386 advisory. - Mattermost versions 10.0.x = 10.0.1, 10.1.x = 10.1.1, 9.11.x = 9.11.3, 9.5.x = 9.5.11...

Google Chrome < 131.0.6778.204 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 131.0.6778.204. It is, therefore, affected by multiple vulnerabilities as referenced in the 202412stable-channel-update-for-desktop18 advisory. - Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowe...

WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Zlrqh Patchstack Alliance in WordPress Plugin Upload Scanner versions = 1.2...

Fedora 40 : chromium (2024-162a4dfe4f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-162a4dfe4f advisory. Update to 131.0.6778.139 High CVE-2024-12381: Type Confusion in V8 High CVE-2024-12382: Use after free in Translate Tenable has extracted the...

CVE-2024-54265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Reflected XSS.This issue affects Barcode Scann...

CVE-2024-54265 WordPress Barcode Scanner and Inventory manager plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Reflected XSS.This issue affects Barcode Scann...

CVE-2024-54265 WordPress Barcode Scanner and Inventory manager plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Reflected XSS.This issue affects Barcode Scann...

CVE-2024-54265

CVE-2024-54265 affects UkrSolution Barcode Scanner with Inventory & Order Manager (Barcode Scanner with Inventory Manager) up to version 1.6.6. The issue is a Reflected XSS caused by improper input neutralization during web page generation. Public references indicate this vulnerability exists in ...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50131)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50131 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character whe...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50179)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50179 advisory. - In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50282)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50282 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add missing size check in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50049)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50049 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointer befo...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50167)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50167 advisory. - In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in...