PT-2024-34792 · Eshop +1 · E-Shop +1

Name of the Vulnerable Software and Affected Versions: e-shops versions n/a through 1.0.3 WordPress e-Shops Plugin version 1.0.3 Description: A Cross-Site Request Forgery CSRF vulnerability allows Reflected XSS. This issue affects e-shops, enabling potential attacks. Users are urged to update to...

Oracle Linux 9 : squid (ELSA-2024-9625)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9625 advisory. - Resolves: RHEL-65076 - CVE-2024-45802 squid: Denial of Service processing ESI response content Tenable has extracted the preceding description block directly...

Oracle Linux 9 : fontforge (ELSA-2024-9439)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-9439 advisory. 20201107-6 - Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws Tenable has extracted the preceding description block...

PT-2024-34972 · Unknown · Kiran Patil Location Click Map

Name of the Vulnerable Software and Affected Versions: Kiran Patil Location Click Map versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Kiran Patil Location...

Oracle Linux 9 : bluez (ELSA-2024-9413)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9413 advisory. 5.72-2 - Bump release to rebuild for RHEL-9.5 5.72-1 - Update to 5.72 Tenable has extracted the preceding description block directly from the Oracle...

PT-2024-34795 · Unknown · Random Featured Post

Name of the Vulnerable Software and Affected Versions: Random Featured Post versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2024-34816 · WordPress · Otter - Gutenberg Block

Name of the Vulnerable Software and Affected Versions: Otter - Gutenberg Block versions 3.0.3 and earlier Description: A Missing Authorization vulnerability in Otter - Gutenberg Block allows for exploiting incorrectly configured access control security levels. This issue is related to broken acce...

PT-2024-35233 · Unknown · Qunatumcloud Floating Buttons For Woocommerce

Name of the Vulnerable Software and Affected Versions: QunatumCloud Floating Buttons for WooCommerce versions 2.8.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendation...

PT-2024-16147 · Sonaar · Mp3 Audio Player – Music Player

Name of the Vulnerable Software and Affected Versions: The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress versions up to, and including, 5.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's sonaar audioplayer shortcode due t...

PT-2024-16895 · Korenix · Korenix Jetport 5601

Name of the Vulnerable Software and Affected Versions: Korenix JetPort 5601 versions through 1.2 Description: The pathname of the root directory to a Restricted Directory allows Path Traversal. This issue enables Path Traversal in Korenix JetPort 5601. Recommendations: For versions through 1.2,...

PT-2024-35271 · WordPress · Pressaholic Wordpress Video Robot - The Ultimate Video Importer

Name of the Vulnerable Software and Affected Versions: Pressaholic WordPress Video Robot - The Ultimate Video Importer versions 1.20.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This...

PT-2024-35255 · Skpstorm · Skpstorm Sk Wp Settings Backup

Name of the Vulnerable Software and Affected Versions: Skpstorm SK WP Settings Backup versions n/a through 1.0 Description: A Cross-Site Request Forgery CSRF vulnerability in Skpstorm SK WP Settings Backup allows Object Injection. This issue enables an attacker to inject objects, potentially...

PT-2024-35252 · Unknown · Stephen Cui Xin

Name of the Vulnerable Software and Affected Versions: Stephen Cui Xin versions n/a through 1.0.8.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a weakness in the software that can be exploited. Recommendations: For versions n/a...

PT-2024-35253 · Unknown · Dmc Airin Blog

Name of the Vulnerable Software and Affected Versions: DMC Airin Blog versions 1.6.1 and earlier Description: The issue is related to the deserialization of untrusted data, which allows object injection in DMC Airin Blog. Recommendations: For versions 1.6.1 and earlier, update to a version later...

PT-2024-16805

Name of the Vulnerable Software and Affected Versions MDaemon Email Server versions prior to 24.5.1c Description An XSS issue was discovered in MDaemon Email Server, allowing a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window by sending an HTML...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. CVE-2024-36484 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."...

Fedora 41 : unbound (2024-a5d6cd9f0a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a5d6cd9f0a advisory. Fixed builds on F41. Fixes CVE-2024-8508 - https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1 Tenable has extracted the preceding...

Fedora 37 : moodle (2022-74a9c8e95f)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-74a9c8e95f advisory. Fixes for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : golang-opentelemetry-contrib / golang-opentelemetry-otel (2024-971a3a4ef7)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-971a3a4ef7 advisory. Update opentelemetry stack to 1.17 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2024-20405 · Athonet · Athonet Vepc Mme

Name of the Vulnerable Software and Affected Versions: Athonet vEPC MME version 11.4.0 Description: The issue is related to an invalid memory access when handling the ProtocolIE ID field of E-RAB Setup List Context SURes messages. This allows attackers to cause a Denial of Service DoS to the...