Cisco Unified Communications Manager IM & Presence XSS (cisco-sa-cucm-xss-RgH7MpKA)

The version of Cisco Unified Communications Manager IM & Presence Service on the remote host is 12.51 prior to 12.51SU5. It is, therefore affected by a cross-site scripting vulnerability XSS. An unauthenticated remote attacker could, with the interaction of another user, exploit this vulnerabilit...

Cisco Unity Connection XSS (cisco-sa-cucm-xss-RgH7MpKA)

The version of Cisco Unity Connection installed on the remote host is prior to 14S2. It is, therefore affected by a cross-site scripting vulnerability XSS. An unauthenticated remote attacker could, with the interaction of another user, exploit this vulnerability to execute arbitrary code in the...

manchesterselfstorage.co.uk Cross Site Scripting vulnerability OBB-2751925

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Rocket.Chat: Rocket.Chat Server RCE

Vulnerability description not provided...

Atlassian Jira < 8.13.12 Cross-Site Scripting

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.12 or 8.14.x prior to 8.20.2. It is, therefore, affected by a vulnerability allowing anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site...

RHEL 8 : squid:4 (RHSA-2022:5528)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5528 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: DoS when...

CVE-2022-22677

A vulnerability was found in WebKitGTK. This issue occurs due to a logic issue in video self-preview feature in a webRTC call, which can be interrupted if the user answers a phone call or the audio capture is interrupted. This flaw allows a remote attacker to perform a denial of service attack...

Malicious Package

Overview web-self-serve-ads is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2022:2274-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2274-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2022:2265-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2265-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

Denial Of Service (DoS)

webkit2gtk is vulnerable to denial of service. The vulnerability exists due to a logic issue in video self-preview feature in a webrtc call, which can be interrupted if the user answers a phone call...

The vulnerability of the component allows for the creation, design, configuration, and display of information panels within the Self Service Composition Environment (SSCE) of the SAP Manufacturing Integration and Intelligence platform. This vulnerability enables a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the component responsible for creating, designing, configuring, and displaying information panels of the Self Service Composition Environment SSCE platform for SAP Manufacturing Integration and Intelligence is related to deficiencies in access control and improper management ...

Nextcloud 授权问题漏洞

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an authorization issue vulnerability that stems from a lack of user account ownership checks...

End-to-End Encryption's Central Role in Modern Self-Defense

With abortion set to be criminalized in more than half the US, encryption has never been more important for protection—and civil disobedience...

RHEL 7 : rh-php73-php (RHSA-2022:5491)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5491 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: password of excessive length...

TrueConf Server Cross-Site Scripting Vulnerability (CNVD-2022-53538)

TrueConf Server is a self-hosted and secure video collaboration platform from the Russian company TrueConf. version 4.3.7 of TrueConf Server contains a cross-site scripting vulnerability that can be exploited by remote attackers to perform basic cross-site scripting DOM attacks...

Fedora 36 : thunderbird (2022-01b6d6f289)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-01b6d6f289 advisory. Update to 91.11.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHEL 8 : expat (RHSA-2022:5314)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5314 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: stack exhaustion in doctype parsing CVE-2022-25313 expat: integer...

Scientific Linux Security Update : python on SL7.x i686/x86_64 (2022:5235)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5235-1 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python-urllib3: CRLF injection via HTTP request method...

Fedora 36 : firefox (2022-59e474cd5c)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-59e474cd5c advisory. - Update to new upstream 102.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...