2518 matches found
CVE-2023-45853 affecting package blosc for versions less than 1.21.6-1
CVE-2023-45853 affecting package blosc for versions less than 1.21.6-1. An upgraded version of the package is available that resolves this issue...
UBUNTU-CVE-2024-11831
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by...
Photon OS 5.0: Git PHSA-2025-5.0-0463
An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0463. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid21520...
CVE-2024-57177
A host header injection vulnerability exists in the NPM package of perfood/couch-auth = 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information...
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1136)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2025:0377-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0377-1 advisory. - Update to version 20250115.01 bsc1236406, bsc1236407 - CVE-2024-24790: Bump the golang compiler version to 1.22.4 bsc1225974 Tenable has...
Debian dla-4046 : ark - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4046 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4046-1 [email protected] https://www.debian.org/lts/security/...
CVE-2024-45341 affecting package golang for versions less than 1.18.8-5
CVE-2024-45341 affecting package golang for versions less than 1.18.8-5. A patched version of the package is available...
CVE-2021-43519 affecting package lua for versions less than 5.4.4-1
CVE-2021-43519 affecting package lua for versions less than 5.4.4-1. A patched version of the package is available...
CVE-2020-15945 affecting package lua for versions less than 5.4.0-1
CVE-2020-15945 affecting package lua for versions less than 5.4.0-1. A patched version of the package is available...
CVE-2020-8554 affecting package python-kubernetes for versions less than 21.7.0-1
CVE-2020-8554 affecting package python-kubernetes for versions less than 21.7.0-1. A patched version of the package is available...
CVE-2024-21488
Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the childprocess exec function without input sanitization. If attacker-controlled user input is given to the macaddressfor function of the package, it is possible for the attacker to execute...
CVE-2024-21543
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks...
CVE-2024-21526
All versions of the package speaker are vulnerable to Denial of Service DoS when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash...
CVE-2024-31206
dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In [email protected], network requests to the third-party API are sent over HTTP, which is unencrypted. Unencrypted traffic can be easily intercepted and modified by attackers. Anyone who uses the package could be the victi...
Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1100)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1113)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : buku (2025-e035838041)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e035838041 advisory. Update to 4.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issu...
Fedora: Security Advisory (FEDORA-2025-df3432c3ee)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...