Easy WP SMTP Plugin for WordPress < 1.5.2 Multiple Vulnerabilities

The WordPress Easy WP SMTP Plugin installed on the remote host is affected by multiple vulnerabilities as follows: - A Path Traversal Vulnerability CVE-2022-45833. - A Remote Code Execution vulnerability in the auth component CVE-2022-42699. - A Path Traversal Vulnerability CVE-2022-45829. Note...

WooCommerce PDF Invoices & Packing Slips Plugin for WordPress < 3.0.1 Reflected Cross-Site Scripting

The WordPress WooCommerce PDF Invoices & Packing Slips Plugin installed on the remote host does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to a Reflected Cross-Site Scripting vulnerability rXSS. Note that the scanner has not test...

Oracle Linux 8 : libvorbis (ELSA-2019-3703)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3703 advisory. 1.3.6-2 - Sync with git for CVE-2017-14160, CVE-2018-10392, CVE-2018-10393 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 7 : ELSA-2017-0933-1: / kernel (ELSA-2017-09331)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-09331 advisory. - The mpipowm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows...

Oracle Linux 7 : docker-engine (ELSA-2019-4597)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-4597 advisory. 18.03.1.ol-0.0.14 - rebuild 18.03.1.ol-0.0.13 - update for CVE-2018-20699 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : kubernetes / kubeadm-upgrade / kubeadm-ha-setup (ELSA-2019-4593)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4593 advisory. - OLCNE-235 CVE-2019-9946 portmap inserts rules at the front of the iptables nat chains -- CVE-2019-9946 -- CVE-2019-1002101 -- CVE-2019-1002100...

PHP 8.2.x < 8.2.9 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.0.x prior to 8.0.30, or 8.1.x prior to 8.1.22. It is, therefore, affected by multiple vulnerabilities: - A security issue with external entity loading in XML without enabling it. CVE-2023-3823 - A...

Apache Tomcat 8.5.x < 8.5.93 Open Redirect

The version of Apache Tomcat installed on the remote host is 8.5.0 to 8.5.92, 9.0.0-M1 to 9.0.79, 10.1.0-M1 to 10.1.12 or 11.0.0-M1 to 11.0.0-M10. If the ROOT default web application is configured to use FORM authentication then it is possible that a specially crafted URL could be used to trigger...

Rocky Linux 8 : postgresql:10 (RLSA-2023:4539)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4539 advisory. - schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with...

Exploit for Code Injection in Phpunit_Project Phpunit

VulnerabilityScanner for PHPUnit RCE A specialized vulne...

Amazon Linux 2023 : nodejs, nodejs-devel, nodejs-full-i18n (ALAS2023-2023-290)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-290 advisory. Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

PT-2023-36240 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

PT-2023-36241 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

RHEL 7 : firefox (RHSA-2023:4461)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4461 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Moxa NPort Improper Authentication (CVE-2016-9361)

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

Atlassian Confluence 8.x < 8.2.0 Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.0 prior to 7.13.20, 6.1.0 prior to 7.19.8 or 6.1.0 prior to 8.2.0. It is, therefore, affected by a Remote Code Execution flaw which permits remote attackers to execute arbitary co...

Apple iOS < 16.6 Multiple Vulnerabilities (HT213841)

Binary data appleios166check.nbin...

Foxit PDF Reader for Mac < 12.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 12.1.1. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the JavaScript engine of Foxit Software...

SUSE-SU-2023:2933-1 Security update for python-pip

This update for python-pip fixes the following issues: - Removed .exe files from the RPM package, to prevent issues with security scanners bsc1212015...

Social Login and Register for WordPress < 7.6.5 Authentication Bypass

The WordPress Social Login and Register Plugin installed on the remote host is affected by an Authentication Bypass. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...