Design/Logic Flaw

Github's CodeQL action is provided to run CodeQL-based code scanning on non-GitHub CI/CD systems and requires a GitHub access token to connect to a GitHub repository. The runner and its documentation previously suggested passing the GitHub token as a command-line parameter to the process instead ...

CVE-2021-32638

CVE-2021-32638 concerns Github CodeQL runner/CodeQL Action used in non-GitHub CI environments, where a GitHub access token supplied via the --github-auth flag could be exposed to other processes through system output (e.g., ps). The issue is resolved by deprecating --github-auth and using secure ...

HTTP Request Smuggling in reel

reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...

HTTP Request Smuggling in reel

reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 20.10 / 21.04 : Babel vulnerability (USN-4962-1) (deprecated)

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/04/25 - Rejected CVE by NVD. The descriptive text and package checks in this plugin were extracted from Ubuntu...

RUSTSEC-2021-0146 Crate `twoway` deprecated by the author

The commit e99b3c7 releasing version 0.2.2 explicitly deprecates twoway in favour of memchr crate...

Crate `twoway` deprecated by the author

The commit e99b3c7 releasing version 0.2.2 explicitly deprecates twoway in favour of memchr crate...

Security Update for .NET Core (May 2021) (deprecated)

This plugin has been deprecated by macosms21maydotnetcore.nasl plugin ID 149472. CVE-2021-31204 does not apply to Windows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/05/13. Deprecated by macosms21maydotnetcore.nasl. include'deprecatednasllevel.inc';...

SUSE-RU-2021:1414-1 Recommended update for boost-legacy

This update for boost-legacy fixes the following issues: Create a new boost-legacy package with version 1.66.0. bsc1175886, jscSLE-17304, jscECO-3147 - Remove duplicate license package that we get from original Boost - Add a backport of Boost.Optional::hasvalue for LibreOffice - Use %license...

CVE-2021-29455

Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people in low-income communities. Grassroot Platform before master deployment as of 2021-04-16 did not properly verify the signature of JSON Web Tokens when refreshing an existing JWT...

SUSE Linux Enterprise Server: Security Advisory (SUSE-SU-2019:1847-1)

The remote host is missing an update for SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE Linux Enterprise Server: Security Advisory (SUSE-SU-2019:1860-1)

The remote host is missing an update for SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE Linux Enterprise Server: Security Advisory (SUSE-SU-2018:1066-1)

The remote host is missing an update for SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE Linux Enterprise Server: Security Advisory (SUSE-SU-2015:2387-1)

The remote host is missing an update for SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE Linux Enterprise Server: Security Advisory (SUSE-SU-2020:2308-1)

The remote host is missing an update for SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : fluidsynth (openSUSE-2021-553) (deprecated)

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21417. Reason: This candidate is a duplicate of CVE-2021-21417. Notes: All CVE users should reference CVE-2021-21417 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

PT-2021-8378 · Unknown · Lz4 Bindings

Name of the Vulnerable Software and Affected Versions: LZ4 bindings affected versions not specified Description: The issue is related to the use of a deprecated C API in LZ4 bindings, which is vulnerable to memory corruption. This could potentially lead to arbitrary code execution if the bindings...

KB5001633: Windows Server 2016 OOB Update (Mar 2021) (deprecated)

The remote Windows host is missing an out-of-band update. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/04/15. Deprecated due to non-security patch check...

KB5001634: Windows 10 version 1803 OOB Update (Mar 2021) (deprecated)

The remote Windows host is missing an out-of-band security update. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/04/15. Deprecated due to non-security pat...

KB5001638: Windows 10 version 1809 OOB Update (Mar 2021) (deprecated)

The remote Windows host is missing an out-of-band security update. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/04/15. Deprecated due to non-security pat...