SUSE: Security Advisory (SUSE-SU-2024:3004-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-42315 affecting package kernel for versions less than 6.6.47.1-1

CVE-2024-42315 affecting package kernel for versions less than 6.6.47.1-1. An upgraded version of the package is available that resolves this issue...

MAL-2025-3453 Malicious code in package-346234293 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9a3e0b5450d5b6de8efa950815a198f42f31514206305057d1ec10e308875244 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2024-2279)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-20149 affecting package js-jquery for versions less than 3.5.0-4

CVE-2019-20149 affecting package js-jquery for versions less than 3.5.0-4. A patched version of the package is available...

SUSE SLES15 / openSUSE 15 Security Update : python310-setuptools (SUSE-SU-2024:2907-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2907-1 advisory. - CVE-2024-6345: Fixed code execution via download functions in the packageindex module bsc1228105 Tenable has extracted the...

CVE-2023-6200 affecting package kernel for versions less than 6.6.35.1-4

CVE-2023-6200 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-23849 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-23849 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-24795 affecting package httpd for versions less than 2.4.61-1

CVE-2024-24795 affecting package httpd for versions less than 2.4.61-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package azcopy for versions less than 10.25.1-1

CVE-2023-45288 affecting package azcopy for versions less than 10.25.1-1. An upgraded version of the package is available that resolves this issue...

Fedora 40 : vim (2024-fe5420ed3f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fe5420ed3f advisory. The newest upstream commit Security fixes for CVE-2024-41965, CVE-2024-41957 Tenable has extracted the preceding description block directly from the...

CVE-2024-42075 affecting package kernel for versions less than 5.15.162.2-1

CVE-2024-42075 affecting package kernel for versions less than 5.15.162.2-1. A patched version of the package is available...

CVE-2024-6655 affecting package gtk2 for versions less than 2.24.32-12

CVE-2024-6655 affecting package gtk2 for versions less than 2.24.32-12. A patched version of the package is available...

DEBIAN-CVE-2024-42461

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed...

The vulnerability of the import_package() function (lib/import.php) in the Cacti network monitoring software allows a attacker to execute arbitrary PHP code.

The vulnerability of the importpackage function lib/import.php in the Cacti network monitoring software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary PHP code using a specially crafted XML file...

CVE-2024-28182 affecting package rust for versions less than 1.75.0-1

CVE-2024-28182 affecting package rust for versions less than 1.75.0-1. A patched version of the package is available...

CVE-2022-35256 affecting package rust for versions less than 1.75.0-1

CVE-2022-35256 affecting package rust for versions less than 1.75.0-1. A patched version of the package is available...

CVE-2019-17596 affecting package python-tensorboard for versions less than 2.16.2-2

CVE-2019-17596 affecting package python-tensorboard for versions less than 2.16.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-24921 affecting package python-tensorboard for versions less than 2.16.2-2

CVE-2022-24921 affecting package python-tensorboard for versions less than 2.16.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1

CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1. An upgraded version of the package is available that resolves this issue...