2710 matches found
Amazon Linux 2 : cups (ALAS-2023-2228)
The version of cups installed on the remote host is prior to 1.6.3-51. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2228 advisory. An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey...
Oracle Linux 8 : edk2 (ELSA-2019-3338)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3338 advisory. 20190308git89910a39dcfd-6.el8 - edk2-ArmVirtPkg-silence-DEBUGVERBOSE-masking-0x00400000-.patch bz1714446 -...
AlmaLinux 8 : cups (ALSA-2023:4864)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4864 advisory. - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An...
Oracle Linux 8 : cups (ELSA-2023-4864)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4864 advisory. 1:2.2.6-51.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from the...
Oracle Linux 9 : cups (ELSA-2023-4838)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4838 advisory. 1:2.3.3op2-16.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from...
K000135996: Intel RDMA Ethernet Controller vulnerability CVE-2023-25775
Security Advisory Description Improper access control in the IntelR Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access. CVE-2023-25775 Impact There is no impact; F5 products are not...
CVE-2023-3425
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...
CVE-2023-3425
CVE-2023-3425 affects M-Files Server: out-of-bounds read allowing an unauthenticated user to read a restricted number of bytes from memory. Affected versions are M-Files Server
CVE-2023-27515
Cross-site scripting XSS for the IntelR DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2022-36392
Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2022-36351
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Input validation
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Cross site scripting
Cross-site Scripting XSS in some IntelR Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
UBUNTU-CVE-2022-36351
Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Input validation
Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2023-27515
Cross-site scripting XSS for the IntelR DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2023-28380
Uncontrolled search path for the IntelR AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2023-39216
Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access...