CVE-2023-28990

CVE-2023-28990 : WordPress theme Viral Mag (versions ≤ 1.0.9) suffers a Missing Authorization flaw that enables an authenticated user withsubscriber privileges to activate plugins arbitrarily due to broken access control. The issue is classed as a Medium risk with CVSSv3.1 score 4.3 (AV:N/AC:L/PR...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50049)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50049 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointer befo...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50202)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50202 advisory. - In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49895)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49895 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-0901)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0901 advisory. - Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50003)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50003 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47747)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47747 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47693)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47693 advisory. - In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ibcachesetupone error flow...

Debian: Security Advisory (DSA-5830-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:4304-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM DataPower Gateway vulnerable to Denial of Service (CVE-2023-52881)

Summary This issue can affect TCP networking Vulnerability Details CVEID:CVE-2023-52881 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas from Yepeng Pan and Christian...

CVE-2024-49120

Windows Remote Desktop Services Remote Code Execution Vulnerability...

GitLab 16.1 < 17.4.6 / 17.5 < 17.5.4 / 17.6 < 17.6.2 (CVE-2024-11274)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - URL Redirection to Untrusted Site 'Open Redirect' in GitLab CVE-2024-11274 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE-2024-47546

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extractccfromdata function within qtdemux.c. In the FOURCCc708 case, the subtraction atomlength - 8 may result in an underflow if atomlength is less than 8. When that subtraction...

libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 on GA media (moderate)

libsvnauthgnomekeyring-1-0-1.14.5-1.1 on GA media Announcement ID: openSUSE-SU-2024:14570-1 Rating: moderate Cross-References: CVE-2024-46901 CVSS scores: CVE-2024-46901 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one...

SUSE-SU-2024:4294-1 Security update for socat

This update for socat fixes the following issues: - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory bsc1225462...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : obs-scm-bridge (SUSE-SU-2024:4212-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:4212-1 advisory. Updated to version 0.5.4: - CVE-2024-22038: Fixed DoS attacks, information leaks with crafted Git...

SUSE SLED15: libpython3_6m1_0 / libpython3_6m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2024:4193-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4193-1 advisory. - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses bsc1233307 Other fixes: -...

CVE-2024-53005

CVE-2024-53005 affects Substance3D Modeler up to version 1.14.1. Issue: out-of-bounds read that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (victim must open a malicious file). Affected component: Substance3D Modeler (modeling tool). Root caus...

CVE-2024-49543 InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...