GitLab 16.9.8 < 17.4.5 / 17.5 < 17.5.3 / 17.6 < 17.6.1 (CVE-2024-11669)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Incorrect Authorization in GitLab CVE-2024-11669 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

GitLab 12.6 < 17.4.5 / 17.5 < 17.5.3 / 17.6 < 17.6.1 (CVE-2024-8237)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Inefficient Algorithmic Complexity in GitLab CVE-2024-8237 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Atlassian SourceTree 3.4.19 RCE

The version of Atlassian SourceTree installed on the remote Windows host is version 3.4.19. It is, therefore, affected by a remote code execution vulnerability. An attacker, with the interaction of an authorized user, can execute arbitrary code on the affected host. Note that Nessus has not teste...

Adobe InDesign < 19.5.1 / 20.0.0 < 20.0.1 Memory leak (APSB24-91) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.1, 20.0.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-91 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory leak CVE-2024-49529 Note that Nessus has not tested for th...

Rockwell Automation FactoryTalk Updater Client 4.20.00 RCE

The version of Rockwell Automation FactoryTalk Updater Client installed on the remote Windows host is prior to 4.20.0. It is, therefore, affected by a remote code execution vulnerability. For more information, consult the vendor advisory. Note that Nessus has not tested for these issues but has...

Atlassian SourceTree 4.2.8 RCE

The version of Atlassian SourceTree installed on the remote MacOS host is version 4.2.8. It is, therefore, affected by a remote code execution vulnerability. An attacker, with the interaction of an authorized user, can execute arbitrary code on the affected host. Note that Nessus has not tested f...

Timing Attack

Overview authentik-client is an authentik Affected versions of this package are vulnerable to Timing Attack due to the usage of a non-constant time comparison for the /-/metrics/ endpoint. An attacker can brute-force the SECRETKEY, which is used to authenticate the endpoint, by observing the time...

LightGBM < 4.6.0 RCE

The version of the LightGBM library installed on the remote host is prior to 4.6.0. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 8090...

JetBrains WebStorm < 2024.3 Code Execution

The version of JetBrains WebStorm installed on the remote host is prior to 2024.3 . It is, therefore, affected by a code execution vulnerability as referenced in the vendor advisory. Code Execution can occur in Untrusted Project mode via specifically constructed type definitions in the installer...

Information Exposure

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Information Exposure via dynamic tables. Remediation Upgrade moodle/moodle to version 4.1.13, 4.2.10, 4.3.7, 4.4.3 or higher. References - Git Commit - GitHub Commit - Moodle Forum - Red Hat Bugzill...

PAN-OS management interface authentication bypass

Added: 11/20/2024 CVE: CVE-2024-0012 Background Palo Alto Networks firewall provides policy-based visibility and control over applications, users and threats. Problem An authentication bypass vulnerability combined with a command injection vulnerability in the PAN-OS management interface allows...

Spring Framework 5.3.x < 5.3.42 DoS (CVE-2024-38828)

The remote host contains a Spring Framework version that is affected by a denial of service vulnerability where Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. Note that Nessus has not tested for this issue but has instead relied only on th...

PT-2025-4766

Name of the Vulnerable Software and Affected Versions Yubico pam-u2f versions prior to 1.3.1 Description The issue allows for an authentication bypass in some configurations, potentially leading to local privilege escalation. An attacker would require access to the system as an unprivileged user...

PT-2024-35149 · Rancher · Steve

Name of the Vulnerable Software and Affected Versions: SUSE Rancher versions before 2175e09, before 6e30359, before c744f0b. Description: A Exposure of Sensitive Information to an Unauthorized Actor issue in SUSE Rancher allows users to watch resources they are not allowed to access, when they ha...

aioHTTP 3.10.6 < 3.10.11 Memory Leak

The version of aioHTTP installed on the remote host is prior to 3.10.11. It is, therefore, affected by a memory leak vulnerability. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a...

PT-2024-35225 · Unknown · Hebrew Date

Name of the Vulnerable Software and Affected Versions: Hebrew Date versions n/a through 2.1.0 Description: A Cross-Site Request Forgery CSRF issue in Hebrew Date allows Stored XSS. Recommendations: For versions n/a through 2.1.0, update to a version that fixes the CSRF vulnerability to prevent...

Google Chrome < 131.0.6778.85 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 131.0.6778.85. It is, therefore, affected by a vulnerability as referenced in the 202411stable-channel-update-for-desktop19 advisory. - Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote...

Trend Micro Deep Security Agent Local Privilege Escalation (KA-0016724)

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Note that Nessus has not tested for this issue but has instead relied solely on the application's self-reported version...

PT-2024-35260 · Unknown · Disable Admin Notices Individually

Name of the Vulnerable Software and Affected Versions: Disable Admin Notices individually versions 1.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by...

CVE-2024-51743 Arbitrary File Write leading up to remote code execution (instructor accounts)

MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability in the update/upload/create file methods in Controllers allows authenticated instructors to write arbitrary files to any location on the web server...