CBL Mariner 2.0 Security Update: tuned (CVE-2024-52337)

The version of tuned installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52337 advisory. - A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This...

CVE-2024-52336 affecting package tuned for versions less than 2.15.0-5

CVE-2024-52336 affecting package tuned for versions less than 2.15.0-5. A patched version of the package is available...

CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5

CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5. A patched version of the package is available...

CVE-2022-1941 affecting package pytorch for versions less than 2.0.0-7

CVE-2022-1941 affecting package pytorch for versions less than 2.0.0-7. A patched version of the package is available...

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

CVE-2024-49761 affecting package ruby for versions less than 3.3.5-1

CVE-2024-49761 affecting package ruby for versions less than 3.3.5-1. A patched version of the package is available...

CVE-2023-38470 affecting package avahi for versions less than 0.8-4

CVE-2023-38470 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

CVE-2023-38469 affecting package avahi for versions less than 0.8-4

CVE-2023-38469 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

CVE-2023-38472 affecting package avahi for versions less than 0.8-4

CVE-2023-38472 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

SUSE SLES15: ovmf / ovmf-tools / qemu-ovmf-ia32 / qemu-ovmf-x86_64 / etc (SUSE-SU-2024:4088-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4088-1 advisory. - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889. Tenable has extracted the preceding description...

Fedora: Security Advisory (FEDORA-2024-607a0047bc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-50186 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50186 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21542

CVE-2024-21542 affects luigi before 3.6.0, vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) caused by improper destination file path validation in the _extract_packages_archive function. A malicious zip can traverse paths to overwrite arbitrary files outside the target directo...

SUSE: Security Advisory (SUSE-SU-2024:4272-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in eff-minifeapp (npm)

--- -= Per source details. Do not edit below this line.=-...

Debian: Security Advisory (DSA-5825-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-11282 Malicious code in @volcenjine/openapi (npm)

--- -= Per source details. Do not edit below this line.=-...

Fedora 40 : pam (2024-45478608e2)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-45478608e2 advisory. pamaccess: rework resolving of tokens as hostname. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6. A patched version of the package is available...