2453 matches found
openSUSE 15 Security Update : opera (openSUSE-SU-2023:0044-1)
The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0044-1 advisory. - Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a...
EyesOfNetwork Installed (Linux)
Binary data eyesofnetworkinstalled.nbin...
Amazon Still Selling T95 TV Box with Pre-Installed Malware
By Deeba Ahmed Malwarebytes has confirmed that, despite confirmed reports of the presence of pre-installed malware in T95 TV boxes, Amazon is still allowing their sale. This is a post from HackRead.com Read the original post: Amazon Still Selling T95 TV Box with Pre-Installed Malware...
Oracle Business Intelligence Enterprise Edition (OBIEE) Installed
Binary data oraclebusinessintelligenceenterpriseeditioninstalled.nbin...
MAL-2023-548 Malicious code in karma-jasmine-i-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e549b03e79b04aa24627294bb5599da9fb989a712bfbe3a6048c97bed62778b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHEL 7 : rh-nodejs12-nodejs (RHSA-2020:0602)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0602 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
RHEL 7 : rh-python38 (RHSA-2020:4299)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4299 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
Auth0 JsonWebToken Library Installed (Windows)
Binary data auth0jsonwebtokenwininstalled.nbin...
Auth0 jsonwebtoken Library Installed (Linux/UNIX)
Binary data auth0jsonwebtokennixinstalled.nbin...
CVE-2023-0210
A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems...
VMware Cloud Foundation Installed (Unix)
Binary data vmwarecloudfoundationinstalled.nbin...
SUSE SLES15 Security Update : ca-certificates-mozilla (SUSE-SU-2023:0003-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0003-1 advisory. - Updated to 2.60 state of Mozilla SSL root CAs bsc1206622 Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate...
Linux SMB3 Kernel Server (KSMBD) Installed (Linux)
Binary data linuxsmb3kernelserverksmbdlinuxinstalled.nbin...
Fedora 36 : firefox (2022-2321894a60)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2321894a60 advisory. - New upstream version 107.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
CVE-2022-20559
In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User...
CVE-2022-20531
In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
Information disclosure
In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
HP Jumpstart 安全漏洞
HP Jumpstart is a multi-stage pre-installed welcome program from Hewlett-Packard HP USA for various HP products. A security vulnerability exists in HP Jumpstart. An attacker could exploit the vulnerability to escalate privileges...