ownCloud < 10.8 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

Elastic Elasticsearch DoS Vulnerability (ESA-2021-15)

Elasticsearch is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenSSL Multiple Vulnerabilities (20150108 - 1) - Windows

OpenSSL is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 7 : nettle (RHSA-2021:2760)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2760 advisory. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++...

WordPress WooCommerce Blocks Plugin SQL Injection Vulnerability (Jul 2021) - Version Check

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Moodle < 3.8.9, 3.9.x < 3.9.7, 3.10.x < 3.10.4 XSS Vulnerability

Moodle is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Plone CMS 5.0.0 <= 5.2.4 XSS Vulnerability

Plone CMS is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

Lucee < 5.3.5.96, 5.3.6.x < 5.3.6.68, 5.3.7.x < 5.3.7.47 RCE Vulnerability (GHSA-2xvv-723c-8p7r) - Active Check

Lucee is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:lucee:luceeserver";...

Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2021:2313)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2313-1 advisory. - samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token CVE-2021-20254 Note that Nessus has not...

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss, mozilla-nspr (SUSE-SU-2019:14114-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2019:14114-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...

Ubuntu 18.04 LTS / 20.04 LTS : GNOME Autoar regression (USN-4937-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4937-2 advisory. USN-4937-1 fixed a vulnerability in GNOME Autoar. The update caused a regression when extracting certain archives. This update fixes the problem...

openSUSE Security Update : grub2 (openSUSE-2021-790)

This update for grub2 fixes the following issues : - Fixed error with the shimlock protocol that is not found on aarch64 bsc1185580. This update was imported from the SUSE:SLE-15-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Exploit for Path Traversal in Palletsprojects Werkzeug

http-vuln-cve2019-14322.nse - Nmap NSE script to detect CVE-2...

CPE-WiFi is vulnerable to information leakage

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in CPE-WiFi of Shenzhen Sidetech Co. Ltd (CNVD-2021-33395)

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a command execution vulnerability that can be exploited by attackers to execute system commands...

Weak password vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a command execution vulnerability that can be exploited by attackers to execute system commands...

Google Chrome < 90.0.4430.93 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 90.0.4430.93. It is, therefore, affected by multiple vulnerabilities as referenced in the 202104stable-channel-update-for-desktop26 advisory. - Heap buffer overflow in ANGLE in Google Chrome on Windows prior to...

Logic Flaw Vulnerability in Unicom CPE-WiFi

China United Network Communications Group Limited China Unicom, abbreviated as "China Unicom", "Unicom" is mainly engaged in GSM, WCDMA and FDD-LTE mobile network business, fixed communication business, domestic and international communication facility service business, satellite international...

Fedora 32 : python39 (2021-a311bf10d4)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a311bf10d4 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...