PHP 8.3.x < 8.3.14 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.3.14. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.14 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

PT-2024-35393 · 2Fauth · 2Fauth

Name of the Vulnerable Software and Affected Versions: 2FAuth versions prior to 5.4.1 Description: The issue is related to stored cross-site scripting due to improper headers in direct access to uploaded SVGs. An attacker can upload a malicious SVG containing JS code, which could compromise a...

PT-2024-16235 · Google · Car App Android Jetpack Library

Name of the Vulnerable Software and Affected Versions: Car App Android Jetpack Library versions prior to 1.7.0-beta02 Description: The issue is related to a code execution vulnerability in the Car App Android Jetpack Library. Specifically, the CarAppService uses deserialization logic that allows...

Debian dla-3960 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3960 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3960-1 [email protected] https://www.debian.org/lts/security/...

PT-2024-35394 · 2Fauth · 2Fauth

Name of the Vulnerable Software and Affected Versions: 2FAuth version 5.4.1 2FAuth versions prior to 5.4.1 Description: 2FAuth is a web application used to manage Two-Factor Authentication 2FA accounts and generate their security codes. It contains two interconnected vulnerabilities: a Server-Sid...

CVE-2024-31141 Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also...

PT-2024-9898

Name of the Vulnerable Software and Affected Versions Craft CMS versions 3.9.14, 4.13.2, and 5.5.2 Description Craft CMS is susceptible to a remote code execution issue. This affects users whose php.ini configuration has register argc argv enabled. An unspecified remote code execution vector is...

PT-2024-35033 · Wojciech Borowicz · Smooth Maps

Name of the Vulnerable Software and Affected Versions: Wojciech Borowicz Smooth Maps versions n/a through 1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations:...

Debian dla-3958 : libmodule-scandeps-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3958 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3958-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3957 : needrestart - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3957 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3957-1 [email protected]...

CVE-2023-44270

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...

CVE-2024-52318

Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue...

Apache Tomcat 10.1.31 < 10.1.33

The version of Tomcat installed on the remote host is prior to 10.1.33. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.33security-10 advisory. - Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0....

Apache Tomcat 9.0.96 < 9.0.97

The version of Tomcat installed on the remote host is prior to 9.0.97. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.97security-9 advisory. - Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0,...

Apache Tomcat 11.0.0 < 11.0.1

The version of Tomcat installed on the remote host is prior to 11.0.1. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat11.0.1security-11 advisory. - Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0,...

PT-2024-10174 · Iptraf-Ng +3 · Iptraf-Ng +3

Name of the Vulnerable Software and Affected Versions: iptraf-ng version 1.2.1 Description: The issue is related to a stack-based buffer overflow in the iptraf-ng utility, which can be exploited by a remote attacker to execute arbitrary code. This occurs due to the strcpy function in src/ifaces.c...

Apache Tomcat 10.1.27 < 10.1.31 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.31. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.31security-10 advisory. - Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the...

Apache Tomcat 9.0.92 < 9.0.96 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.96. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.96security-9 advisory. - Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the...

PT-2025-13825 · NetGear · Netgear Wnr854T

Name of the Vulnerable Software and Affected Versions: Netgear WNR854T version 1.5.2 Description: The issue concerns a stack-based buffer overflow in the M-SEARCH Host header of the UPNP service, located at /usr/sbin/upnp. Recommendations: For Netgear WNR854T version 1.5.2, consider disabling the...

PT-2024-29296 · Apache · Apache Hertzbeat

Name of the Vulnerable Software and Affected Versions: Apache HertzBeat versions prior to 1.6.1 Description: This issue is related to the deserialization of untrusted data, which can only be exploited by authorized attackers. The estimated number of potentially affected devices worldwide is not...