KLA71479 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft PowerPoint can be exploit...

Courier Management System 2020-1.0 SQL Injection

Titles: courier-management-system-2020-1.0 Multiple-SQLi Author: nu11secur1ty Date: 08/12/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14611/courier-management-system-using-phpmysqli-source-code.htmlcomment-105424 Reference:...

Fedora 40 : python3.13 (2024-bec5d0df1f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bec5d0df1f advisory. - Security fix for CVE-2024-6923. - Fix SystemError in PyEvalGetLocals Tenable has extracted the preceding description block directly from the Fedor...

Fedora 39 : firefox / nss (2024-4fcf85b0ff)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-4fcf85b0ff advisory. Update NSS to 3.103.0 Update to Firefox 129.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

OpenVPN 2.5.x < 2.5.10, 2.6.x < 2.6.10 Multiple Vulnerabilities (Windows)

According to its self-reported version number, the version of OpenVPN installed on the remote Windows host is affected by multiple vulnerabilities: - OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-i...

eduAuthorities 1.0 SQL Injection

Titles: eduAuthorities-1.0 Multiple-SQLi Author: nu11secur1ty Date: 07/29/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html Reference: https://portswigger.net/web-security/sql-injection Description: The...

Nearly 7% of Internet Traffic Is Malicious

Cloudflare reports on the state of applications security. It claims that 6.8% of Internet traffic is malicious. And that CVEs are exploited as quickly as 22 minutes after proof-of-concepts are published. News articles...

Fedora 40 : exim (2024-55603127f3)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-55603127f3 advisory. This is new version of exim fixing CVE-2024-39929. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

KLA91108 ACE vulnerability in Microsoft System Center

A remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-5535 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Defender-for-Endpoint-for-i...

KLA91110 ACE vulnerability in Microsoft Mariner

A remote code execution vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-5535 Exploitation Public exploits exist for this vulnerability. Related products CBL-Mariner-2.0 CVE list CVE-2024-5535...

CVE-2023-32471

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits...

Photon OS 5.0: Nginx PHSA-2023-5.0-0123

An update of the nginx package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0123. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openssh PHSA-2023-4.0-0440

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0440. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libssh PHSA-2024-5.0-0187

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2023-5.0-0107

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0107. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Calico PHSA-2024-4.0-0605

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0605. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Git PHSA-2023-4.0-0426

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0426. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20426...

Photon OS 5.0: Linux PHSA-2023-5.0-0101

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0101. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Nxtgn PHSA-2022-3.0-0373

An update of the nxtgn package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0373. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Linux PHSA-2023-4.0-0483

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0483. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...