2453 matches found
firefox: thunderbird: External protocol handlers could be enumerated via popups
The Mozilla Foundation's Security Advisory: By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed...
PostgreSQL pgAdmin4 Installed (macOS)
Binary data postgresqlpgadmin4macosinstalled.nbin...
Progress Telerik UI for WinForms Installed
Binary data progresstelerikuiforwinformsinstalled.nbin...
Weights & Biases Detection
A Weights & Biases Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208133; scriptversion"1.6";...
AIM Detection
An AIM Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'xcompat.inc'; if description scriptid208127; scriptversion"1.5";...
firefox: thunderbird: External protocol handlers could be enumerated via popups
The Mozilla Foundation's Security Advisory: By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed...
firefox: thunderbird: External protocol handlers could be enumerated via popups
The Mozilla Foundation's Security Advisory: By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed...
Infoblox NIOS Installed
Binary data infobloxniosdetect.nbin...
SUSE CVE-2024-9398
By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox 131, Firefox ESR 128.3, Thunderbird 128.3, and Thunderbird 131...
The vulnerability of the file /squashfs-root/web_cste/cgi-bin/product.ini of the TOTOLink T10 router microprogramming software allows a intruder to gain unauthorized access to the Telnet service.
The vulnerability of the file /squashfs-root/webcste/cgi-bin/product.ini of the TOTOLink T10 microprogramming router software is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the Telnet service...
CVE-2024-40830
This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps...
CVE-2024-40830
This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps...
Apple iOS 和 iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18 and iPadOS version 18, which stems from the possibility that an...
CVE-2024-40830
This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps...
PT-2024-29087
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 Description The issue allows an app to potentially enumerate a user's installed apps. This was addressed with improved data protection. Recommendations For iOS versions prior to 18, update t...
The vulnerability of the validation component of the Aurora operating system, related to the lack of control over public rights to write the installed application files, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the validation component of the “Aurora” operating system is related to the lack of control over public rights to write the files that are installed by applications. Exploiting this vulnerability can lead to violations of data confidentiality, integrity, and accessibility...
CVE-2024-40659
In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional...
Fedora 40 : wireshark (2024-105eb3026f)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-105eb3026f advisory. New version 4.2.7, fix for CVE-2024-8250 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2024-12612)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12612 advisory. 5.4.17-2136.335.4.el8 - mm: memcg/slab: enable kmalloc-cg- caches for x8664. Imran Khan Orabug: 36951041 - printk: add kthread for long-running...