Fedora 36 : bzip3 (2023-3a821e6e73)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3a821e6e73 advisory. This release fixes a memory heap corruption. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

FreeBSD : zeek -- potential DoS vulnerabilities (96d6809a-81df-46d4-87ed-2f78c79f06b1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 96d6809a-81df-46d4-87ed-2f78c79f06b1 advisory. - Tim Wojtulewicz of Corelight reports: Receiving DNS responses from async DNS requests via A...

Self-delgated users can have their delegation unknowingly hijacked during crowdfunding

Lines of code Vulnerability details Impact Self-delegation can be hijacked Proof of Concept PartyGovernance.solL886-L906 function adjustVotingPoweraddress voter, int192 votingPower, address delegate internal VotingPowerSnapshot memory oldSnap = getLastVotingPowerSnapshotForVotervoter; address...

FreeBSD : py39-py -- Regular expression Denial of Service vulnerability (28a37df6-ba1a-4eed-bb64-623fc8e8dfd0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 28a37df6-ba1a-4eed-bb64-623fc8e8dfd0 advisory. - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expressio...

FreeBSD : py-suds -- vulnerable to symlink attacks (b31f7029-817c-4c1f-b7d3-252de5283393)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b31f7029-817c-4c1f-b7d3-252de5283393 advisory. - cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and...

FreeBSD : py-tensorflow -- denial of service vulnerability (ae132c6c-d716-11ed-956f-7054d21a9e2a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ae132c6c-d716-11ed-956f-7054d21a9e2a advisory. - TensorFlow is an open source platform for machine learning. The implementation of...

RHEL 9 : openvswitch3.1 (RHSA-2023:1770)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1770 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

Wireshark 4.0.x < 4.0.5 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.5 advisory. - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet...

Juniper Junos OS Vulnerability (JSA70610)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70610 advisory. - A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet...

SAP NetWeaver AS ABAP Directory Traversal (3294595)

A directory traversal vulnerability exists in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allowing an attacker with non-administrative authorizations to exploit a directory traversal flaw in an...

SUSE SLES15 Security Update : podman (SUSE-SU-2023:1812-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1812-1 advisory. Update to version 4.4.4: libpod: always use direct mapping macos pkginstaller: do not fail when podman-mac-helper fails podman-mac-helper:...

Fedora 37 : glusterfs (2023-5a54eea360)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5a54eea360 advisory. GlusterFS 10.4 GA Security fix for CVE-2023-26253, CVE-2022-48340 Tenable has extracted the preceding description block directly from the Fedora...

NewStart CGSL CORE 5.05 / MAIN 5.05 : compat-exiv2-026 Vulnerability (NS-SA-2023-0022)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has compat-exiv2-026 packages installed that are affected by a vulnerability: - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All...

NewStart CGSL CORE 5.05 / MAIN 5.05 : tracker Vulnerability (NS-SA-2023-0020)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has tracker packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access ...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libgovirt Vulnerability (NS-SA-2023-0019)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libgovirt packages installed that are affected by a vulnerability: - Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause th...

Snippet Box 跨站脚本漏洞

Snippet Box is a simple self-hosted application for pawelmalak individual developers. It is used to organize code snippets. A security vulnerability exists in Snippet-box version 1.0.0. An attacker can exploit the vulnerability to see arbitrary web script or HTML in the "Snippet code" form field...

NewStart CGSL CORE 5.05 / MAIN 5.05 : accountsservice Multiple Vulnerabilities (NS-SA-2023-0024)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has accountsservice packages installed that are affected by multiple vulnerabilities: - An error within the parserollei function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an...

NewStart CGSL CORE 5.05 / MAIN 5.05 : virt-viewer Vulnerability (NS-SA-2023-0027)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has virt-viewer packages installed that are affected by a vulnerability: - Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause...

RHEL 9 : postgresql (RHSA-2023:1693)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1693 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Extension scripts replace objects n...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libxml2 Vulnerability (NS-SA-2023-0008)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libxml2 packages installed that are affected by a vulnerability: - xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forb...