CVE-2024-41663 Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting

Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of...

CVE-2021-43565 affecting package moby-buildx for versions less than 0.7.1-20

CVE-2021-43565 affecting package moby-buildx for versions less than 0.7.1-20. A patched version of the package is available...

Unbreakable Enterprise kernel security update

4.1.12-124.87.2.2 - net/mlx5e: drop shorter ethernet frames Manjunath Patil Orabug: 36660755...

Photon OS 4.0: Nghttp2 PHSA-2023-4.0-0379

An update of the nghttp2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0379. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-20977 affecting package mysql for versions less than 8.0.36-1

CVE-2024-20977 affecting package mysql for versions less than 8.0.36-1. An upgraded version of the package is available that resolves this issue...

Photon OS 4.0: Redis PHSA-2023-4.0-0328

An update of the redis package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0328. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Vim PHSA-2023-5.0-0009

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20355...

Photon OS 4.0: Logrotate PHSA-2023-4.0-0349

An update of the logrotate package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0349. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Go PHSA-2019-3.0-0023

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0023. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid203036...

Photon OS 4.0: Linux PHSA-2022-4.0-0195

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0195. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Pixman PHSA-2022-4.0-0279

An update of the pixman package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Linux PHSA-2024-4.0-0575

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0575. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2023-50230 affecting package bluez for versions less than 5.63-5

CVE-2023-50230 affecting package bluez for versions less than 5.63-5. A patched version of the package is available...

Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint

Summary This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory OOM kill. The issue...

CVE-2024-38583 affecting package kernel for versions less than 6.6.35.1-5

CVE-2024-38583 affecting package kernel for versions less than 6.6.35.1-5. An upgraded version of the package is available that resolves this issue...

CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6

CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6. An upgraded version of the package is available that resolves this issue...

PT-2024-8127 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A6000R version V1.0.1-B20201211.2000 Description: The issue is related to the get apcli conn info function in the TOTOLINK A6000R router's firmware, which fails to neutralize special elements used in an OS command. This can be...

CLSA-2024-1721401573 Fix CVE(s): CVE-2020-27619

SECURITY UPDATE: eval on content received via HTTP in test suite - debian/patches/CVE-2020-27619.patch: No longer call eval on content received via HTTP in the CJK codec tests - CVE-2020-27619...

PT-2024-37871 · Yith · Yith Essential Kit For Woocommerce

Name of the Vulnerable Software and Affected Versions: YITH Essential Kit for WooCommerce versions up to, and including, 2.34.0 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify data without proper authorization. This is due to a missing...

Oracle Essbase Multiple Vulnerabilities (July 2024 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the July 2024 Critical Patch Update CPU. It is, therefore, affected by: - Vulnerability in Oracle Essbase component: Essbase Web Platform Apache Xerces-C++. The supported version that is affected is 21.5.6...