2049 matches found
GHSA-7GM3-MWJW-J53W Command injection in nevado-jms
Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data...
PT-2023-23480 · Skyscreamer · Nevado Jms
Name of the Vulnerable Software and Affected Versions: Skyscreamer Open Source Nevado JMS version 1.3.2 Description: The issue allows attackers to execute arbitrary commands by supplying crafted data due to the lack of security checks when receiving messages. Recommendations: For Skyscreamer Open...
CVE-2023-31826
Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data...
CVE-2023-31826
Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data...
SUSE: Security Advisory (SUSE-SU-2023:2244-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of Google Chrome’s Picture-in-Picture (PiP) technology, which allows attackers to carry out phishing attacks.
The vulnerability of Google Chrome’s Picture-in-Picture PiP technology is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks using a specially created HTML page...
The vulnerability of Google Chrome’s Picture-in-Picture (PiP) technology, which allows attackers to carry out spoofing attacks
The vulnerability of Google Chrome’s Picture-in-Picture PiP technology is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created malicious web page...
The vulnerability of the Prompts component in the Google Chrome browser allows attackers to carry out phishing attacks.
The vulnerability of the Prompts component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks using a specially created HTML page...
Fedora 37 : java-11-openjdk-portable (2023-0ab3a5423f)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0ab3a5423f advisory. Updatings portables to ajva April security update, with few enhancements be properly repacked. Tenable has extracted the preceding description block directly...
Mageia: Security Advisory (MGASA-2023-0162)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Privilege escalation
Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...
CVE-2023-22651
Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...
The vulnerability of the Full Screen Mode implementation of the Google Chrome browser allows a hacker to conceal the content of the Omnibox address bar.
The vulnerability of Google Chrome’s full-screen mode implementation is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to conceal the content of the Omnibox address bar...
GHSA-6M9F-PJ6W-W87G Rancher Webhook is misconfigured during upgrade process
Impact A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into the Kubernetes cluster. When the Webhook is operating in a degraded state, it no...
Fedora 38 : suricata (2023-43ac51ee44)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-43ac51ee44 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...
Fedora: Security Advisory for tcpdump (FEDORA-2023-a66bd67e34)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : dnsmasq (2023-eeca11a4df)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-eeca11a4df advisory. According to DNS flag day set default packet size to 1232 Tenable has extracted the preceding description block directly from the Fedora security advisory...
SUSE: Security Advisory (SUSE-SU-2023:1797-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of Google Chrome browser extensions, which allows a violator to disclose protected information
The vulnerability of Google Chrome’s browser extensions is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...
The vulnerability of the WebShare component of the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the WebShare component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...