Debian: Security Advisory (DSA-5838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : age (2024-4f08c1a90a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4f08c1a90a advisory. Update to 1.2.1 to fix https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c security issue. Tenable has extracted the preceding...

CVE-2024-45337 affecting package telegraf for versions less than 1.31.0-3

CVE-2024-45337 affecting package telegraf for versions less than 1.31.0-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: tuned (CVE-2024-52337)

The version of tuned installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52337 advisory. - A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This...

CVE-2024-52336 affecting package tuned for versions less than 2.15.0-5

CVE-2024-52336 affecting package tuned for versions less than 2.15.0-5. A patched version of the package is available...

CVE-2022-1941 affecting package pytorch for versions less than 2.0.0-7

CVE-2022-1941 affecting package pytorch for versions less than 2.0.0-7. A patched version of the package is available...

CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5

CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5. A patched version of the package is available...

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

CVE-2024-21548

Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Note: This issue relates to the widely known and actively developed 'Bun'...

CVE-2024-49761 affecting package ruby for versions less than 3.3.5-1

CVE-2024-49761 affecting package ruby for versions less than 3.3.5-1. A patched version of the package is available...

CVE-2023-38469 affecting package avahi for versions less than 0.8-4

CVE-2023-38469 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

CVE-2023-38470 affecting package avahi for versions less than 0.8-4

CVE-2023-38470 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

CVE-2023-38472 affecting package avahi for versions less than 0.8-4

CVE-2023-38472 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

Fedora: Security Advisory (FEDORA-2024-607a0047bc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: ovmf / ovmf-tools / qemu-ovmf-ia32 / qemu-ovmf-x86_64 / etc (SUSE-SU-2024:4088-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4088-1 advisory. - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889. Tenable has extracted the preceding description...

CVE-2024-50186 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50186 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21542

CVE-2024-21542 affects luigi before 3.6.0, vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) caused by improper destination file path validation in the _extract_packages_archive function. A malicious zip can traverse paths to overwrite arbitrary files outside the target directo...

SUSE: Security Advisory (SUSE-SU-2024:4272-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in eff-minifeapp (npm)

--- -= Per source details. Do not edit below this line.=-...

Debian: Security Advisory (DSA-5825-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...