Chef Infra Client SEoL (17.x)

According to its version, Chef Infra Client is 17.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

BELL-CVE-2024-44997

Bulletin has no description...

CVE-2023-51712

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...

BELL-CVE-2024-45619

Bulletin has no description...

PT-2024-38456 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A vulnerability candidate was withdrawn due to lack of evidence. The candidate was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer...

AlmaLinux 9 : nodejs:18 (ALSA-2024:6147)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6147 advisory. node-tar: denial of service while parsing a tar file due to lack of folders depth validation CVE-2024-28863 nodejs: Bypass network import restriction via...

CVE-2024-34463

The CVE-2024-34463 vulnerability affects BPL Medical Technologies’ PWS-01BT devices and Be Well Android app, with sensitive data sent in unencrypted BLE packets and lacking authentication/integrity protection. Connected sources (Red Hat, CISA ICS) confirm cleartext transmission and potential inte...

Unrestricted File Upload

FeehiCMS is vulnerable to unrestricted file upload. The vulnerability is due to lack of proper validation and restrictions on file uploads in the BannerForm argument of the createBanner function, which allows attackers to perform unrestricted file uploads...

The vulnerability of the SetSmartQoSSettings function in D-Link DIR-846 Wi-Fi router software allows a hacker to execute arbitrary code.

The vulnerability of the SetSmartQoSSettings function in D-Link DIR-846 network devices lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating the parameters of...

PT-2024-40930 · Web-Time · Web-Time

Name of the Vulnerable Software and Affected Versions: web-time affected versions not specified Description: The issue concerns a crate that is no longer maintained, with the author recommending the use of the maintained web-time crate instead. Recommendations: At the moment, there is no...

ASB-A-346629290

Bulletin has no description...

SAP Internet Graphics Server (IGS) XMLCHART XXE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Internet Graphics Server IGS XMLCHART XXE', 'Description' = %q This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities...

ROS-20240829-01

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to resource release errors. resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the Core component of the Oracle V...

Kashipara Music Management System File Upload Vulnerability (CNVD-2024-37438)

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which originates in /music/ajax.php?action=savemusic, which lacks validation of the uploaded file and can be exploited by an attacker...

BELL-CVE-2023-52899

Bulletin has no description...

BELL-CVE-2024-43845

Bulletin has no description...

CVE-2024-45168

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable...

CVE-2024-45193

An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria does not ensure that S n. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the...

CVE-2024-45193

An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria does not ensure that S n. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the...

Oracle Siebel CRM SEoL (7.5.3)

According to its version, Oracle Siebel CRM is 7.5.3. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...