CVE-2024-38833

creationtimestamp| type| source ---|---|--- 2024-11-26 12:01:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113549148342977152 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/1625 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/26626 2024-11-26 15:02:55+00:00|...

CVE-2024-53930

creationtimestamp| type| source ---|---|--- 2024-11-25 03:10:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113541397021426026...

Fedora 40 : needrestart (2024-d2124788a8)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2124788a8 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

MGASA-2024-0368 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.61 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Fedora 41 : libsndfile (2024-1318318e7a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1318318e7a advisory. fix crash in in ogg vorbis 2322326 CVE-2024-50612 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Photon OS 5.0: Linux PHSA-2024-5.0-0407

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0407. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-52616

creationtimestamp| type| source ---|---|--- 2024-11-21 20:47:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113522903838141203 2024-12-24 07:03:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ldzuuk6cwf25 2024-12-31 14:33:27+00:00| seen|...

CVE-2024-10890

creationtimestamp| type| source ---|---|--- 2024-11-21 07:42:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113519815681471528...

PT-2024-9339 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.8.0 through 10.2.11 Drupal Core versions 10.3.0 through 10.3.9 Drupal Core versions 11.0.0 through 11.0.8 Description: The issue is related to insufficient protection of the web page structure, allowing an attacker to...

Oracle Linux 9 : buildah (ELSA-2024-9459)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9459 advisory. - rebuild to fix CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 9 : grafana (ELSA-2024-9473)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9473 advisory. - Resolves RHEL-62308: CVE-2024-47875 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

PT-2024-8392

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. before 8.1.31 PHP versions 8.2. before 8.2.26 PHP versions 8.3. before 8.3.14 Description: The issue is related to an integer overflow in the ldap escape function on 32-bit systems when handling uncontrolled long string...

Vulnerabilities fixed in VMware vCenter Server

VMware has fixed vulnerabilities in vCenter Server. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, possibly even to root and execute arbitrary code on the system. VMware reports in an update to its original security advisory that exploits have been...

Vulnerabilities fixed in Siemens Tecnomatix Plant Simulation

Siemens has fixed vulnerabilities in Tecnomatix Plant Simulation. The vulnerabilities are in how Tecnomatix Plant Simulation processes specially crafted WRL files. These vulnerabilities include out-of-bounds writes, use-after-free and stack-based overflows, all of which can be exploited by...

Oracle Linux 9 : jose (ELSA-2024-9181)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9181 advisory. 14-1 - Rebase jose-14 upstream version Resolves: RHEL-38079 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

About the security content of iOS18.1.1 and iPadOS 18.1.1

About the security content of iOS18.1.1 and iPadOS 18.1.1 This document describes the security content of iOS 18.1.1 and iPadOS 18.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2021-1132

A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to access sensitive data. This vulnerability exists because the web-management interface and certain HTTP-based APIs do not properly...

Oracle Linux 8 : webkit2gtk3 (ELSA-2024-9636)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9636 advisory. 2.46.3-1 - Update to 2.46.3 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Photon OS 5.0: Linux PHSA-2024-5.0-0399

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0399. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

USN-7089-6: Linux kernel vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...