44 matches found
ElectronVulnerableVersion
CVE-2023-4863 / CVE-2023-5129 に対して脆弱な Electron アプリを検出する この PowerShell スクリプトは、Sysinternals Strings をダウンロードし、すべてのドライブ上のすべての .exe ファイル内の文字列を再帰的に検索し、見つかった Electron のバージョンを以下に記載されている既知のパッチ済みバージョンと比較して、CVE-2023-4863 / CVE-2023-5129 に対する脆弱性を判定します。 注: このスクリプトは strings.zip を C:\Windows\Temp にダウンロードし、そこから...
Linux Distros Unpatched Vulnerability : CVE-2023-5129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863. CVE-2023-5129 Note that Nessus relies on...
Fedora: Security Advisory (FEDORA-2023-9108cda47c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL MAIN 6.02 : libwebp Multiple Vulnerabilities (NS-SA-2024-0067)
The remote NewStart CGSL host, running version MAIN 6.02, has libwebp packages installed that are affected by multiple vulnerabilities: - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863. CVE-2023-5129 - Heap buffer overflow in...
Fedora: Security Advisory (FEDORA-2023-c890266d3f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : firefox (CESA-2023:5184)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:5184 advisory. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863. CVE-2023-5129 - Heap buffer overflow i...
CentOS 8 : thunderbird (CESA-2023:5201)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:5201 advisory. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863. CVE-2023-5129 - Heap buffer overflow i...
CentOS 7 : firefox (RHSA-2023:5197)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5197 advisory. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863. CVE-2023-5129 - Heap buffer...
GHSA-94VC-P8W7-5P49 Bundled libwebp in imagecodecs vulnerable
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 previously CVE-2023-4863. imagecodecs v2023.9.18 upgrades the bundled libwebp binary to v1.3.2...
Bundled libwebp in imagecodecs vulnerable
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 previously CVE-2023-4863. imagecodecs v2023.9.18 upgrades the bundled libwebp binary to v1.3.2...
Amazon Linux 2023 : libwebp, libwebp-devel, libwebp-java (ALAS2023-2023-355)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-355 advisory. With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. The ReadHuffmanCodes function allocates the HuffmanCode buffer with a size that comes from an array of...
Fedora: Security Advisory for libwebp (FEDORA-2023-2a0668fe43)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : libwebp (2023-2a0668fe43)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-2a0668fe43 advisory. Backport fix for CVE-2023-5129. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CVE-2023-5129
This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...
CVE-2023-5129
Removed by vendor...
RHEL 8 : libwebp (RHSA-2023:5309)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5309 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...
RHEL 8 : libwebp: critical (RHSA-2023:5236)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5236 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...
RHEL 8 : thunderbird (RHSA-2023:5202)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5202 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.1. Security Fixes: libwebp...
RHEL 8 : thunderbird (RHSA-2023:5185)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5185 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.15.1. Security Fixes: libwebp...