Ubuntu 18.04 ESM : Linux kernel vulnerabilities (USN-6329-1)

The remote Ubuntu 18.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6329-1 advisory. Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions...

Amazon Linux 2 : python-configobj (ALAS-2023-2188)

The version of python-configobj installed on the remote host is prior to 4.7.2-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2188 advisory. All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate...

Joomla! 1.5.x < 1.5.16 Multiples Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass that may allow attackers to perform otherwise restricted actions - A session fixation an attacker may leverage this issue to hijack an arbitrary session an...

Joomla 4.2.x < 4.3.2 Multiple Vulnerabilities (5887-joomla-4-3-2-security-and-bug-fix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.2.x prior to 4.3.2. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issu...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : musl vulnerabilities (USN-5990-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5990-1 advisory. It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this vulnerability to caus...

Debian DSA-5375-1 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5375 advisory. - Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially...

Atlassian Jira < 7.1.9 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to . It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the /auditing/settings endpoint, which permits attackers to perform Cross Site Request Forgery...

CentOS 8 : go-toolset:rhel8 (CESA-2023:0446)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:0446 advisory. - In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closin...

Adobe Dimension < 3.4.7 Multiple Memory leak (APSB23-10)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-10 advisory. - Adobe Dimension version 3.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to...

Juniper Junos OS Vulnerability (JSA70181)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70181 advisory. - An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attack...

The vulnerability of the OWASP Zed Attack Proxy, a security scanner for web applications, arises from improper verification of certificate authenticity. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the OWASP Zed Attack Proxy web application scanner is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Dell Wyse Management Suite < 4.0 Multiple Vulnerabilities (DSA-2022-329)

The version of Dell Wyse Management Suite installed on the remote host is prior to 4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-329 advisory. - Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not...

openSUSE 15 Security Update : matio (openSUSE-SU-2022:10235-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10235-1 advisory. - matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data a...

FreeBSD : rubygem-cgi -- HTTP response splitting vulnerability (84ab03b6-6c20-11ed-b519-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 84ab03b6-6c20-11ed-b519-080027f5fec9 advisory. - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response...

GLSA-202208-14 : Mozilla Thunderbird: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-14 Mozilla Thunderbird: Multiple Vulnerabilities - Please review the referenced CVE identifiers for details. CVE-2021-29967, CVE-2021-29969, CVE-2021-29970, CVE-2021-29976, CVE-2021-29980, CVE-2021-29984, CVE-2021-29985,...

Login Form Cross-Site Request Forgery

Cross Site Request Forgery CSRF occurs when an user is tricked into clicking on a link which would automatically submit a request without the user's consent. This can be made possible when the request does not include an anti-CSRF token, generated each time the request is visited and passed when...

Atlassian Jira 8.6.x < 8.13.1 Cross-Site Request Forgery

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.10 or 8.6.x prior to 8.13.1. It is, therefore, affected by a Cross-Site Request Forgery CSRF vulnerability, following an Information Disclosure vulnerability in the referr...

NewStart CGSL MAIN 6.02 : krb5 Vulnerability (NS-SA-2022-0057)

The remote NewStart CGSL host, running version MAIN 6.02, has krb5 packages installed that are affected by a vulnerability: - MIT Kerberos 5 aka krb5 before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1encode.c...

Debian DSA-5075-1 : minetest - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5075 advisory. Several vulnerabilities have been discovered in Minetest, a sandbox video game and game creation system. These issues may allow attackers to manipulate game...

openSUSE 15 Security Update : dovecot23 (openSUSE-SU-2021:2892-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2892-1 advisory. - The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular...