6278 matches found
KB5034833: Windows Server 2008 Security Update (February 2024)
The remote Windows host is missing security update 5034833. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361,...
KB5034767: Windows 10 Version 1607 and Windows Server 2016 Security Update (February 2024)
The remote Windows host is missing security update 5034767. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361,...
Moderate: Red Hat Security Advisory: libmaxminddb security update
An update for libmaxminddb is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Moderate: Red Hat Security Advisory: libmaxminddb security update
An update for libmaxminddb is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
CVE-2024-0971
A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content...
CVE-2024-0971
CVE-2024-0971 is a SQL injection vulnerability in Tenable Nessus. The linked documents confirm that an authenticated, low-privileged remote attacker could potentially alter contents of the scan DB. Exploitation details are not provided beyond this CVE entry. A remediation path is indicated by Ten...
[R1] Nessus Version 10.7.0 Fixes Multiple Vulnerabilities
R1 Nessus Version 10.7.0 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 02/06/2024 - 11:07 Two separate vulnerabilities were discovered, reported and fixed: A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could...
CVE-2024-0971: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content...
Debian: Security Advisory (DLA-3731-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3731-1] man-db: fix sandboxing issues
Debian LTS Advisory DLA-3731-1 [email protected] https://www.debian.org/lts/security/ Colin Watson February 01, 2024 https://wiki.debian.org/LTS Package : man-db Version : 2.8.5-2+deb10u1 CVE ID : Debian Bug : 926450 948238 1061870 man-db provides the "man" command used for reading manu...
Debian dla-3731 : man-db - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3731 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3731-1 [email protected] https://www.debian.org/lts/security/...
BIT-CODEIGNITER-2022-40827
B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php where function...
CVE-2024-0989
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function delsndb of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. T...
CVE-2023-40551
A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase...
PT-2024-40357
Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 1.1.0 Description The issue affects the SurrealDB HTTP REST API, where the ID, DB, and NS headers fail to parse when containing special characters, causing a panic that crashes the SurrealDB server, leading to denia...
PT-2024-1164
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description The issue is related to insufficient input validation in the DB Privileges component of the Oracle Application Object Library. This can allow a remote attacker to gain...
cinema-italiano-db.de Cross Site Scripting vulnerability OBB-3830355
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2024-2000
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the hisi acc vfio pci module in the Linux kernel. When the optional PRE COPY support was added to speed up the device compatibility check, it failed to...
PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)
Impact The isCleanHtml method is not used on this this form, which makes it possible to store an xss in DB. The impact is low because the html is not interpreted in BO, thanks to twig's escape mechanism. In FO, the xss is effective, but only impacts the customer sending it, or the customer sessio...
GHSA-VR7M-R9VM-M4WF PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)
Impact The isCleanHtml method is not used on this this form, which makes it possible to store an xss in DB. The impact is low because the html is not interpreted in BO, thanks to twig's escape mechanism. In FO, the xss is effective, but only impacts the customer sending it, or the customer sessio...