773 matches found
CVE-2024-10772
The CVE-2024-10772 entry describes a firmware-update integrity issue in SICK InspectorP61x and InspectorP62x (and related TiM3xx families). The root cause is unvalidated firmware updates that allow an attacker to install modified firmware on the device, potentially compromising confidentiality, i...
The vulnerability of SAP NetWeaver Java software update, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP NetWeaver Java software update manager is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
[SECURITY] [DLA 3974-1] dnsmasq security update
From: Lee Garrett [email protected] To: [email protected] Subject: SECURITY DLA 3974-1 dnsmasq security update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3974-1 [email protected]...
Digital China Networks多款产品 安全漏洞
Digital China Networks DCME-520 DCN DCME-520 and others are products of Digital China Networks China.Digital China Networks DCME-520 is a new generation of high-performance security gateway with multi-core high performance. Digital China Networks DCME-320 DCN DCME-320 is a wireless router.Digital...
[SECURITY] [DLA 3967-1] mpg123 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3967-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 26, 2024 https://wiki.debian.org/LTS -...
WordPress WP Travel Engine plugin <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability
Missing Authorization to Authenticated Contributor+ Plugin Settings Update vulnerability discovered by Noah Stead TurtleBurg in WordPress Plugin WP Travel Engine versions = 6.2.1...
GHSA-JJF3-7X72-PQM9
creationtimestamp| type| source ---|---|--- 2024-11-15 22:54:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113489431661732928...
Fedora 37 : sysstat (2022-9f3af921a5)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-9f3af921a5 advisory. Security fix for CVE-2022-39377 - arithmetic overflow in allocatestructures on 32 bit systems Tenable has extracted the preceding description block directly...
SUSE: Security Advisory (SUSE-SU-2024:3987-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : pypy3.9 (2022-7ca361a226)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-7ca361a226 advisory. Backport fix for CVE-2021-28861 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 41 : oci-cli / python-oci (2024-ee636be6ff)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-ee636be6ff advisory. oci-cli 3.41.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
RockyLinux 9 : edk2 (RLSA-2024:8935)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8935 advisory. openssl: Possible denial of service in X.509 name checks CVE-2024-6119 Tenable has extracted the preceding description block directly from the RockyLinux security...
CVE-2024-50087
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free on readalloconename error The function readalloconename does not initialize the name field of the passed fscryptstr struct if kmalloc fails to allocate the corresponding buffer. Thus, it is n...
Fedora: Security Advisory (FEDORA-2024-afa796a751)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress GRÜN spendino Spendenformular plugin <= 1.0.1 - Arbitrary Option Update to Privilege Escalation vulnerability
Arbitrary Option Update to Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin GRÜN spendino Spendenformular versions = 1.0.1...
Creative com.creative.apps.xficonnect 安全漏洞
Creative com.creative.apps.xficonnect is a driver from Creative. A security vulnerability exists in Creative com.creative.apps.xficonnect version 2.00.02. A remote attacker could exploit this vulnerability to obtain sensitive information through the firmware update process...
CVE-2024-43564
creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review 2026-07-06 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpxoqy36dk2f...
PT-2024-28664 · Veertu · Veertu Anka Build
Name of the Vulnerable Software and Affected Versions: Veertu Anka Build version 1.42.0 Description: A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build. The vulnerability occurs during Anka node agent update, allowing a low privilege user to trigger...
[SECURITY] [DSA 5780-1] php8.2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5780-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2024 https://www.debian.org/security/faq -...
