CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

CVE-2024-49761 affecting package ruby for versions less than 3.3.5-1

CVE-2024-49761 affecting package ruby for versions less than 3.3.5-1. A patched version of the package is available...

CVE-2023-38470 affecting package avahi for versions less than 0.8-4

CVE-2023-38470 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

CVE-2023-38472 affecting package avahi for versions less than 0.8-4

CVE-2023-38472 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

CVE-2023-38469 affecting package avahi for versions less than 0.8-4

CVE-2023-38469 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

SUSE SLES15: ovmf / ovmf-tools / qemu-ovmf-ia32 / qemu-ovmf-x86_64 / etc (SUSE-SU-2024:4088-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4088-1 advisory. - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889. Tenable has extracted the preceding description...

Fedora: Security Advisory (FEDORA-2024-607a0047bc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-50186 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50186 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21542

CVE-2024-21542 affects luigi before 3.6.0, vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) caused by improper destination file path validation in the _extract_packages_archive function. A malicious zip can traverse paths to overwrite arbitrary files outside the target directo...

SUSE: Security Advisory (SUSE-SU-2024:4272-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in eff-minifeapp (npm)

--- -= Per source details. Do not edit below this line.=-...

Debian: Security Advisory (DSA-5825-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-11282 Malicious code in @volcenjine/openapi (npm)

--- -= Per source details. Do not edit below this line.=-...

Fedora 40 : pam (2024-45478608e2)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-45478608e2 advisory. pamaccess: rework resolving of tokens as hostname. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

CVE-2024-24786 affecting package influxdb for versions less than 2.7.3-7

CVE-2024-24786 affecting package influxdb for versions less than 2.7.3-7. A patched version of the package is available...

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6. A patched version of the package is available...

MAL-2025-939 Malicious code in kotlin-stdlib-jdk8 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f217cf2fd34c9cab642b70bd9d778e6ef08a3dfba1954060a29983f2d3e6d47e Importing the module triggers sending out the hostname to the package author. It looks to be a placeholder/pentest activity related to BytedDance. --- Category...

openSUSE Security Advisory (SUSE-SU-2024:4076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-53860 Potential Abuse for Sending Arbitrary Emails in sp-php-email-handler

sp-php-email-handler is a PHP package for handling contact form submissions. Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in confirmation emails. This could enable malicious actors to...

CVE-2024-28960 affecting package hvloader for versions less than 1.0.1-6

CVE-2024-28960 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...