Fedora 40 : 389-ds-base (2024-ac07913be8)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ac07913be8 advisory. Changelog Tue Jul 30 2024 Viktor Ashirov - 3.0.4-2 - Replace lmdb with lmdb-libs in Requires Tue Jul 30 2024 Viktor Ashirov - 3.0.4-1 - Update to...

Fedora 39 : roundcubemail (2024-b60eb661a4)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b60eb661a4 advisory. Version 1.6.8 - Managesieve: Protect special scripts in managesievekolabmaster mode - Fix newmailnotifier notification focus in Chrome 9467 - Fix...

Dell Peripheral Manager Installed (Windows)

Binary data dellperipheralmanagerwininstalled.nbin...

Oracle Linux 9 : thunderbird (ELSA-2024-5392)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-5392 advisory. 115.14.0-1.0.1 - Add Oracle prefs 115.14.0 - Add OpenELA debranding 115.14.0-1 - Update to 115.14.0 build1 Tenable has extracted the preceding...

Canonical Snapcraft Packages Installed (Linux)

Binary data canonicalsnapcraftpackagesnixinstalled.nbin...

OpenAI ChatGPT App Installed (macOS)

Binary data chatgptappmacosinstalled.nbin...

Fedora 39 : ffmpeg (2024-4d2c8e6f85)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4d2c8e6f85 advisory. Backport fix for CVE-2023-49528 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2024-22169 Misconfiguration in node.js causing a code execution in WD Discovery

WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow code execution by utilizing the 'ELECTRONRUNASNODE' environment variable. Any malicious application operating with standard user permissions can exploit this vulnerability,...

The vulnerability of the SSH service on the SmartOS Wi-Fi router AdTran SRG 834-5 allows a attacker to execute arbitrary operating system commands with root privileges.

The vulnerability of the SSH service on the SmartOS Wi-Fi router AdTran SRG 834-5 is related to the use of pre-installed credentials due to incorrect processing of the MAC address sequence. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating syste...

Fedora 40 : xen (2024-169a1cc589)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-169a1cc589 advisory. double unlock in x86 guest IRQ handling XSA-458, CVE-2024-31143 x86: Native Branch History Injection XSA-456 version 3, CVE-2024-2201 Tenable has...

CVE-2024-41109 Pimcore vulnerable to disclosure of system and database information behind /admin firewall

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to /admin/index/statistics with a logged in Pimcore user exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the...

Pimcore 安全漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates applications for Web content management, e-commerce frameworks and product information management. A security vulnerability exists in...

The vulnerability of the software platform for remote management of endpoints, backup, and virtualization in Acronis Cyber Infrastructure (ACI) arises from the use of pre-installed credentials. This allows a malicious actor to execute arbitrary code.

The vulnerability of the software platform for remote control of endpoints, backup copies, and virtualization in Acronis Cyber Infrastructure ACI lies in the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Mattermost Desktop Installed (Linux)

Binary data mattermostdesktopnixinstalled.nbin...

The vulnerability of the Data Provider UI component of the Oracle Installed Base information storage center in the Oracle E-Business Suite allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Data Provider UI component of the Oracle Installed Base information storage center in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read,...

Fedora 40 : freeradius (2024-04ba1ff731)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-04ba1ff731 advisory. Update to upstream release 3.2.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Mattermost Desktop Installed (Windows)

Binary data mattermostdesktopwininstalled.nbin...

Microsoft Azure Network Watcher VM Extension Installed (Windows)

Binary data microsoftazurenetworkwatcherwininstalled.nbin...

LocalAI Security Breach

LocalAI is a free, open source alternative to OpenAI from the individual developer Ettore Di Giacinto. A security vulnerability exists in LocalAI version 2.15.0 and prior versions that stems from the presence of a Cross Site Request Forgery CSRF vulnerability. An attacker could use this...

The vulnerability of the mySCADA myPRO industrial process visualization and control system, related to the use of pre-installed account data, allows a intruder to gain access to the system.

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to the use of pre-set account data. Exploiting this vulnerability can allow a malicious actor to gain access to the system remotely...