CVE-2022-34323

Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model...

CVE-2022-34322

CVE-2022-34322 : Sage Enterprise Intelligence 2021 R1.1 contains multiple XSS bugs. One stored XSS via the Notify Users About Modification/Notifications features allows an authenticated attacker to execute JavaScript in other users’ browsers; also a self-XSS exists in the Favorites tab where a na...

CVE-2022-34322

Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScript code in the context of users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Notify Users About Modification me...

CVE-2022-34323

Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model...

openSUSE 15 Security Update : opera (openSUSE-SU-2022:10254-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10254-1 advisory. - Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a...

Fedora 36 : OpenImageIO (2022-e63bc3eca2)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e63bc3eca2 advisory. Update to 2.3.21.0. Security fix for CVE-2022-36354 CVE-2022-38143 CVE-2022-41639 CVE-2022-41684 CVE-2022-41794 CVE-2022-41838 CVE-2022-41977...

CVE-2022-3347

DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain...

Fedora 36 : curl (2022-9836111c44)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9836111c44 advisory. - smb/telnet: fix use-after-free when HTTP proxy denies tunnel CVE-2022-43552 - http: use the IDN decoded name in HSTS checks CVE-2022-43551 Tenable...

GHSA-VWG4-846X-F94V usememos/memos vulnerable to improper authorization

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos versions prior to 0.9.0 are vulnerable to improper authorization, which can allow a user to modify the nickname, username and email of other users without permission...

GHSA-W57V-6XP4-RM2V usememos/memos vulnerable to account takeover due to improper access control

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Versions prior to 0.9.0 improperly maintain access control allowing an attacker to take over an account by changing header values in the HTTP request...

GHSA-QCW2-492V-57XJ usememos/memos missing Secure cookie attribute

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos prior to 0.9.0 is missing the Secure cookie attribute, making it vulnerable to session hijacking...

usememos/memos missing Secure cookie attribute

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos prior to 0.9.0 is missing the Secure cookie attribute, making it vulnerable to session hijacking...

Fedora 36 : kitty (2022-d718af66d1)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d718af66d1 advisory. Fixed KITTYINSTALLATIONDIR in scripts ---- version 0.26.3 Tenable has extracted the preceding description block directly from the Fedora security advisory...

SolarWinds Platform 2022.4.1

The version of SolarWinds Platform installed on the remote host is prior to 2022.4.1. It is, therefore, affected by a vulnerability as referenced in the hybridcloudobservabilitysolarwindsplatform202241 advisory. - Sensitive information was stored in plain text in a file that is accessible by a us...

Fedora 35 : drupal7-i18n (2022-73e61f4c0b)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-73e61f4c0b advisory. - https://www.drupal.org/project/i18n/releases/7.x-1.31 - https://www.drupal.org/project/i18n/releases/7.x-1.30 -...

Fedora 36 : exim (2022-6125582f45)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6125582f45 advisory. Fixed use after free in regex handler Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 36 : php (2022-0b77fbd9e7)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-0b77fbd9e7 advisory. PHP version 8.1.11 29 Sep 2022 Core: Fixed bug php81726: phar wrapper: DOS when using quine gzip file. CVE-2022-31628. cmb Fixed bug php81727: Don't...

Fedora 36 : apptainer (2022-0be906c02d)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-0be906c02d advisory. Update to 1.1.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 35 : webkit2gtk3 (2022-e7726761c4)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e7726761c4 advisory. Fix scrolling issues in some sites having fixed background. Fix prolonged buffering during progressive live playback. Fix several crashes and...

GHSA-RGJ5-JJ5Q-V3V7 Memos Cross-site Scripting vulnerability

Memos, an open-source, self-hosted memo hub, is vulnerable to stored Cross-site Scripting XSS in versions 0.8.3 and prior. A patch is available and anticipated to be part of version 0.9.0...