CBL Mariner 2.0 Security Update: kernel (CVE-2024-50074)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50074 advisory. - In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50044)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50044 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: FIX possible deadlock...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50196)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50196 advisory. - In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on lev...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53059)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53059 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handlin...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50188)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50188 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50245)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50245 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix possible deadlock in mirea...

Rockwell Arena Installed (Windows)

Binary data rockwellarenawininstalled.nbin...

Cleo LexiCom Web Service Detection

Binary data cleolexicomdetect.nbin...

Cleo VLTrader Web Service Detection

Binary data cleovltraderdetect.nbin...

SUSE SLES15: libpython3_9-1_0 / libpython3_9-1_0-32bit / python39 / etc (SUSE-SU-2024:4135-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4135-1 advisory. - CVE-2024-11168: Improper validation of IPv6 and IPvFuture addresses bsc1233307. Bug fixes: - Remove -IVendor/ from...

Liferay Portal 7.0.0 < 7.4.3.102 XSS

The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, 7.2 GA through fix pack 20, 7.1 GA through fix pack 28, 7.0 GA through fix pack 102 and 6.2 GA through fix pack 173 does not sufficiently...

SUSE SLES15: postgresql13 / postgresql13-contrib / postgresql13-devel / etc (SUSE-SU-2024:4175-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4175-1 advisory. - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level...

vulnerability scanner

This is a Java-based web vulnerability scanner. The tool is classified as an offensive tool for web vulnerability scanning. The primary vulnerability being targeted is not explicitly stated, but based on the code and metadata, it appears to be a web application scanner that can perform SQL...

CVE-2024-28140

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and...

CVE-2024-28140 Violation of Least Privilege Principle

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and...

CVE-2024-28140

CVE-2024-28140 describes a vulnerability in the Image Access Scan2Net scanner software where the device boots into kiosk mode and opens the Scan2Net interface in a browser window that runs with root privileges, with several other applications also running as root. The issue is evidenced by proces...

WordPress Barcode Scanner and Inventory manager plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Ngô Thái An Patchstack Alliance in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.6.6...

GeoServer < 2.22.5 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.22.5 or 2.23.0 parameter Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Fedora 40 : retsnoop / rust-rbspy (2024-ccce2763b0)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-ccce2763b0 advisory. Rebuild affected applications with ruzstd v0.7.3 to address RUSTSEC-2024-0400. Tenable has extracted the preceding description block directly from the Fedora...

KB5048685: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (December 2024)

The remote Windows host is missing security update 5048685. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-49090 - Windows...