Photon OS 4.0: Linux PHSA-2024-4.0-0722

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0722. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Squid PHSA-2024-4.0-0726

An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0726. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2024-36769 · Unknown · Kintpv Wooconnect

Name of the Vulnerable Software and Affected Versions: Kintpv Wooconnect versions n/a through 8.129 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inje...

PT-2024-36701 · Azzaroco · Azzaroco Wp Superbackup

Name of the Vulnerable Software and Affected Versions: Azzaroco WP SuperBackup versions 2.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This can lead to unauthorized acces...

PT-2024-33640 · Storeapps · Storeapps Smart Manager

Name of the Vulnerable Software and Affected Versions: StoreApps Smart Manager versions n/a through 8.45.0 Description: The issue is related to a Missing Authorization vulnerability in StoreApps Smart Manager. This allows for unauthorized access. Recommendations: For versions n/a through 8.45.0,...

PT-2024-36764 · Searchiq · Searchiq

Name of the Vulnerable Software and Affected Versions: SearchIQ versions n/a through 4.6 Description: A Cross-Site Request Forgery CSRF issue is found in SearchIQ. This problem impacts versions of SearchIQ up to 4.6. Recommendations: For versions n/a through 4.6, update to a version later than 4....

PT-2024-34636 · Minidlna +1 · Minidlna +1

Name of the Vulnerable Software and Affected Versions: Minidlna versions v1.3.3 and earlier Description: The issue allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file. This is due to command injection in Minidlna, where an attacker can...

PT-2024-36697 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: WP Royal Royal Elementor Addons versions 1.3.987 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

Debian: Security Advisory (DLA-4004-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 3.0: Postgresql13 PHSA-2024-3.0-0806

An update of the postgresql13 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0806. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

openSUSE Security Advisory (openSUSE-SU-2024:0417-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for python (SUSE-SU-2024:4428-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-17847 · Amcrest · Amcrest Ipc-Ip3M-943B +4

Name of the Vulnerable Software and Affected Versions: Amcrest IP2M-841B versions up to 20241211 Amcrest IP2M-841W versions up to 20241211 Amcrest IPC-IP2M-841B versions up to 20241211 Amcrest IPC-IP3M-943B versions up to 20241211 Amcrest IPC-IP3M-943S versions up to 20241211 Amcrest IPC-IP3M-HX2...

CBL Mariner 2.0 Security Update: avahi (CVE-2023-38473)

The version of avahi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38473 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the avahialternativehostname function...

CBL Mariner 2.0 Security Update: avahi (CVE-2023-38471)

The version of avahi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38471 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the dbussethostname function...

PT-2024-17835 · Unknown · 1000 Projects Daily College Class Work Report Book

Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /login.php. The manipulation of the user argument leads to SQL injection. It is possible to...

openSUSE Security Advisory (SUSE-SU-2024:4422-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-17438 · WordPress · Bitcoin Lightning Publisher

Name of the Vulnerable Software and Affected Versions: Bitcoin Lightning Publisher for WordPress versions up to, and including, 1.4.1 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows...

Fedora: Security Advisory (FEDORA-2024-82a696ca59)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-10181 · Unknown · Phpspreadsheet

Name of the Vulnerable Software and Affected Versions: PhpSpreadsheet versions prior to 3.7.0 PhpSpreadsheet versions prior to 2.3.5 PhpSpreadsheet versions prior to 2.1.6 PhpSpreadsheet versions prior to 1.29.7 Description: The issue is related to the bypass of the cross-site scripting sanitizer...