7-Zip Qcow Handler Infinite Loop DoS Vulnerability - Windows

7zip is prone to a qcow handler infinite loop denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox ESR Security Update (MFSA2024-65) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Update (MFSA2024-65) - Windows

Mozilla Firefox ESR is prone to an enhanced tracking protection CSP frame-src bypass and DOM-based XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mozilla Thunderbird ESR Security Update (MFSA2024-68) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird...

PT-2024-9489

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: The issue exists due to the lack of neutralization of special elements us...

Fedora 40 : chromium (2024-292aa2c246)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-292aa2c246 advisory. Update to 131.0.6778.85 High CVE-2024-11395: Type Confusion in V8 High CVE-2024-11110: Inappropriate implementation in Blink Medium CVE-2024-11111:...

KLA77555 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Security vulnerability in Enhanced Tracking Protection’s Strict mode can be...

Fedora 41 : chromium (2024-582d2a7648)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-582d2a7648 advisory. Update to 131.0.6778.85 High CVE-2024-11395: Type Confusion in V8 High CVE-2024-11110: Inappropriate implementation in Blink Medium CVE-2024-11111:...

F5 Networks BIG-IP : Qt vulnerability (K000148690)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148690 advisory. In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPer...

PT-2024-8866 · Microsoft · Dynamics 365 Sales

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Sales versions prior to 3.24104.15 Description: The issue concerns a spoofing vulnerability in Microsoft Dynamics 365 Sales. This vulnerability may allow a remote attacker to perform a spoofing attack by not taking...

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-43)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

PT-2024-34870

Name of the Vulnerable Software and Affected Versions BlackBerry AtHoc version 7.15 Description A Stored Cross-Site Scripting XSS issue in the Management Console could allow an attacker to execute actions in the context of the victim's session. This issue may potentially be exploited to perform...

Fedora 39 : needrestart (2024-6015ee69f0)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6015ee69f0 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov-2 2024)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Drupal Multiple Vulnerabilities (Nov 2024) - Linux

Drupal is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; ifdescription...

CBL Mariner 2.0 Security Update: tar (CVE-2023-39804)

The version of tar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39804 advisory. - In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in...

PT-2024-16807 · WordPress · Formidable Forms

Name of the Vulnerable Software and Affected Versions: The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress versions up to, and including, 6.16.1.2 Description: The issue is related to insufficient input sanitization and...

Adobe InDesign < 19.5.1 / 20.0.0 < 20.0.1 Memory leak (APSB24-91)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.1, 20.0.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-91 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2024-49529 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: libsoup (CVE-2024-52532)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52532 advisory. - GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain...

PT-2024-16990 · WordPress · Salavat Counter Plugin

Name of the Vulnerable Software and Affected Versions: salavat counter Plugin plugin for WordPress versions up to, and including, 0.9.1 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...