Fedora 41 : python-nbdime (2024-01e170c1ac)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-01e170c1ac advisory. This update fixes CVE-2024-55565 by updating the vendored JavaScript to include a version of nanoid without the security issue. Tenable has extracted the...

CISCO-SA-20191106-IDN

creationtimestamp| type| source ---|---|--- 2024-12-17 06:40:49+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792820956417...

PT-2024-17154 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical vulnerability was found in the 1000 Projects Beauty Parlour Management System. The issue affects an unknown functionality of the file /admin/edit-services.php...

Vulnerabilities fixed in VMware vCenter Server

VMware has fixed vulnerabilities in vCenter Server. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, possibly even to root and execute arbitrary code on the system. VMware reports in an update to its original security advisory that exploits have been...

Fedora 37 : grafana (2022-a054b2bc7a)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-a054b2bc7a advisory. Automatic update for grafana-8.5.6-1.fc37. Changelog Wed Jun 29 2022 Andreas Gerstmayr 8.5.6-1 - update to 8.5.6 tagged upstream community sources,...

Fedora 41 : buildah / podman (2024-2e8c63e8bf)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-2e8c63e8bf advisory. Automatic update for buildah-1.37.4-1.fc41, podman-5.2.4-1.fc41. Changelog for buildah Mon Oct 07 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstre...

Fedora 41 : tinyproxy (2024-f6b87970b3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f6b87970b3 advisory. Automatic update for tinyproxy-1.11.2-1.fc41. Changelog Tue Jul 16 2024 Carl George - 1.11.2-1 - Update to version 1.11.2 rhbz2298298 - Fixes CVE-2023-49606...

CVE-2024-50036 affecting package kernel for versions less than 6.6.57.1-1

CVE-2024-50036 affecting package kernel for versions less than 6.6.57.1-1. An upgraded version of the package is available that resolves this issue...

govulncheck-vulndb-0.0.20241030T212825-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241030T212825-1.1 on GA media Announcement ID: openSUSE-SU-2024:14447-1 Rating: moderate Cross-References: CVE-2022-45157 CVE-2023-22644 CVE-2023-32197 CVE-2024-10214 CVE-2024-10241 CVE-2024-22030 CVE-2024-22036 CVE-2024-33662 CVE-2024-36814 CVE-2024-38365 CVE-2024-39223...

PT-2024-33622 · Unknown · Sam Glover Client Power Tools Portal

Name of the Vulnerable Software and Affected Versions: Sam Glover Client Power Tools Portal versions 1.8.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

java-17-openjdk security update

An update is available for java-17-openjdk. This update affects Rocky Linux 8, Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Ja...

MAL-2024-9773 Malicious code in plugin-warn-if-update-available (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.42.10-2

CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.42.10-2. A patched version of the package is available...

CVE-2024-46782 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-46782 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

KLA77354 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-13 · AppleTalk and RELOAD Framing dissector crashes Exploitation Public exploits exist for this vulnerability. Related products...

PT-2024-12165 · Unknown · Technitium

Name of the Vulnerable Software and Affected Versions: Technitium versions through 11.0.3 Description: The issue enables attackers to conduct a DNS cache poisoning attack, allowing them to inject fake responses within 1 second. Recommendations: For versions through 11.0.3, update to a version tha...

PT-2024-30776 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions 3.3.1 through 3.3.102 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in the Zephyr Project Manager. This vulnerability allows for unauthorized access...

VMware Workstation 17.0.x < 17.5.1 Multiple Vulnerabilities (VMSA-2024-0011)

The version of VMware Workstation installed on the remote host is 17.0.x prior to 17.5.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

CVE-2024-40902 affecting package kernel for versions less than 6.6.35.1-1

CVE-2024-40902 affecting package kernel for versions less than 6.6.35.1-1. A patched version of the package is available...

Security Bulletin: Maximo Application Suite - IBM WebSphere Application Server Liberty is vulnerable to CVE-2024-22354 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to CVE-2024-22354. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application...