GHSA-JJF3-7X72-PQM9

creationtimestamp| type| source ---|---|--- 2024-11-15 22:54:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113489431661732928...

Fedora 37 : sysstat (2022-9f3af921a5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-9f3af921a5 advisory. Security fix for CVE-2022-39377 - arithmetic overflow in allocatestructures on 32 bit systems Tenable has extracted the preceding description block directly...

SUSE: Security Advisory (SUSE-SU-2024:3987-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : pypy3.9 (2022-7ca361a226)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-7ca361a226 advisory. Backport fix for CVE-2021-28861 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : oci-cli / python-oci (2024-ee636be6ff)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-ee636be6ff advisory. oci-cli 3.41.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

RockyLinux 9 : edk2 (RLSA-2024:8935)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8935 advisory. openssl: Possible denial of service in X.509 name checks CVE-2024-6119 Tenable has extracted the preceding description block directly from the RockyLinux security...

CVE-2024-50087

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free on readalloconename error The function readalloconename does not initialize the name field of the passed fscryptstr struct if kmalloc fails to allocate the corresponding buffer. Thus, it is n...

Fedora: Security Advisory (FEDORA-2024-afa796a751)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress GRÜN spendino Spendenformular plugin <= 1.0.1 - Arbitrary Option Update to Privilege Escalation vulnerability

Arbitrary Option Update to Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin GRÜN spendino Spendenformular versions = 1.0.1...

Creative com.creative.apps.xficonnect 安全漏洞

Creative com.creative.apps.xficonnect is a driver from Creative. A security vulnerability exists in Creative com.creative.apps.xficonnect version 2.00.02. A remote attacker could exploit this vulnerability to obtain sensitive information through the firmware update process...

CVE-2024-43564

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review 2026-07-06 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpxoqy36dk2f...

PT-2024-28664 · Veertu · Veertu Anka Build

Name of the Vulnerable Software and Affected Versions: Veertu Anka Build version 1.42.0 Description: A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build. The vulnerability occurs during Anka node agent update, allowing a low privilege user to trigger...

[SECURITY] [DSA 5780-1] php8.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5780-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2024 https://www.debian.org/security/faq -...

BELL-CVE-2024-46763

Bulletin has no description...

CVE-2022-25768 Improper Access Control in UI upgrade process

The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade proces...

CVE-2024-38249

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1293/ 2024-09-26 05:00:00+00:00| seen|...

CVE-2024-38227

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-10-17 16:14:17+00:00| published-proof-of-concept| https://t.me/bizonechannel/1491 2024-10-19 14:19:20+00:00| seen|...

CVE-2024-8200

The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the 'updateapikey'...

CVE-2024-38114

creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...

CVE-2024-7532

creationtimestamp| type| source ---|---|--- 2024-08-07 00:13:47+00:00| seen| https://t.me/cvedetector/2642 2024-08-08 13:39:01+00:00| seen| https://t.me/HackingInsights/9019 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...