PT-2023-18101 · Google · Android

Name of the Vulnerable Software and Affected Versions: Settings affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with no...

PT-2023-18084 · Unknown · Content Service

Name of the Vulnerable Software and Affected Versions: Content Service affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without requiring query permissions, due to side channel information disclosure. This could lead to local...

PT-2023-18078 · Google · Android

Name of the Vulnerable Software and Affected Versions: Package Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

Fedora 38 : dotnet7.0 (2023-c132c84fcf)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c132c84fcf advisory. This the October 2023 monthly update for .NET 7 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.12/7.0.12.md Tenable has...

SentinelOne Agent Installed (Windows)

Binary data sentineloneagentwininstalled.nbin...

CVE-2023-4668

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins present and active, active theme,...

CVE-2023-4668 Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins present and active, active theme,...

PT-2023-28993 · Arduino · Arduino Create Agent

Name of the Vulnerable Software and Affected Versions: Arduino Create Agent versions prior to 1.3.3 Description: The issue affects the endpoint "/v2/pkgs/tools/installed". A user who can perform HTTP requests to the localhost interface, or bypass the CORS configuration, can escalate privileges to...

Arduino Data Forgery Issue Vulnerability

Arduino is a microcontroller board from the Arduino project. A security vulnerability exists in Arduino Create Agent versions prior to 1.3.2, which stems from a security hole in the /v2/pkgs/tools/installed endpoint. An attacker can exploit this vulnerability to bypass CORS configuration and...

PT-2023-28996 · Arduino · Arduino Create Agent

Name of the Vulnerable Software and Affected Versions: Arduino Create Agent versions prior to 1.3.3 Description: The issue affects the endpoint "/v2/pkgs/tools/installed" and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the localho...

Arduino path traversal vulnerability

Arduino is a microcontroller board from the Arduino project. A security vulnerability exists in Arduino Create Agent versions prior to 1.3.2, which stems from a security flaw in the /v2/pkgs/tools/installed endpoint. An attacker can exploit this vulnerability by constructing HTTP requests...

ImageMagick Installed (macOS)

Binary data imagemagickmacosinstalled.nbin...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Cacti vulnerabilities (USN-5214-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5214-1 advisory. It was discovered that Cacti was incorrectly validating permissions for user accounts that had been recently disabled. An...

Ubuntu 18.04 ESM : etcd vulnerabilities (USN-5628-2)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5628-2 advisory. USN-5628-1 fixed vulnerabilities in etcd. This update provides the corresponding updates for Ubuntu 18.04 ESM. Tenable has extracted the preceding...

Microsoft Identity Linux Broker Installed (Linux)

Binary data microsoftidentitybrokernixinstalled.nbin...

PaperCut NG Installed (Windows)

Binary data papercutngwininstalled.nbin...

The vulnerability of the InstallApplication class in the D-View 8 network device management platform allows a perpetrator to bypass authentication.

The vulnerability of the InstallApplication class in the D-View 8 network device management platform is related to the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to bypass authentication processes...

CVE-2023-5370

On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0...

Fedora 37 : traceroute (2023-734aa51998)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-734aa51998 advisory. Update to 2.1.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-6386-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6386-2 advisory. Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from divisio...