Fedora: Security Advisory (FEDORA-2024-5a5f401785)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

macOS 14.x < 14.7.2 Multiple Vulnerabilities (121840)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.2. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An attacke...

PT-2024-36378 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.2 Description: A logic issue was addressed with improved file handling. This issue allows a malicious app to access arbitrary files. The problem is fixed in macOS Sequoia 15.2. Recommendations: For versions...

PT-2024-36359 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: This issue was addressed through improved state management. The problem involves incorrect attribution of privacy indicators for microphone access. Recommendations: For versions prior to 15.2, update ...

Microsoft Office Multiple Vulnerabilities (Dec 2024) - Mac OS X

This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update November 2024 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 22 for SLE 15 SP4) (SUSE-SU-2024:4276-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA78030 OSI vulnerability in Mozilla Thunderbird

Information disclosure vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories MFSA2024-69 Exploitation Related products Mozilla-Thunderbird CVE list CVE-2024-50336 warning Solution Update to the latest...

Drupal XSS Vulnerability (SA-CORE-2024-003) - Linux

Drupal is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

Fedora 41 : python3.12 (2024-340a4bdc5d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-340a4bdc5d advisory. Security fix for CVE-2024-12254 ---- Update to 3.12.8 Tenable has extracted the preceding description block directly from the Fedora security...

Drupal XSS Vulnerability (SA-CORE-2024-003) - Windows

Drupal is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

PT-2024-9491 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 26.0 and earlier Description: The issue is related to a Use After Free vulnerability, which involves the use of memory after it has been freed. This could allow an attacker to execute arbitrary code in the context of...

PT-2024-9505 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 23.0.8, 24.0.5 and earlier Description: The issue is related to a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

PT-2024-9947 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.14.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

openSUSE Security Advisory (openSUSE-SU-2024:0402-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM QRadar SIEM is vulnerable to cross-site scripting (CVE-2024-47107)

Summary IBM QRadar SIEM is vulnerable to cross-site scripting. This vulnerability has been addressed in the update. Vulnerability Details CVEID:CVE-2024-47107 DESCRIPTION: IBM QRadar is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary...

CVE-2024-52586

eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version 4.6.0 and prior to version 5.1.0 that allows an attacker to bypass eLabFTW's built-in multifactor authentication mechanism. An attacker who can authenticate locally by knowing o...

PT-2024-13810 · Unknown · Registrationmagic

Name of the Vulnerable Software and Affected Versions: RegistrationMagic versions 5.2.3.0 and earlier Description: The issue is related to a missing authorization vulnerability in Metagauss User Registration Forms RegistrationMagic, which allows the exploitation of incorrectly configured access...

PT-2024-35395 · Unknown · Tuleap Community Edition +1

Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 16.1.99.50 Tuleap Enterprise Edition versions prior to 16.1-4 Tuleap Enterprise Edition versions prior to 16.0-7 Description: A malicious user with the ability to create an artifact in a tracker with...

PT-2024-12131 · Unknown · Total Poll Lite

Name of the Vulnerable Software and Affected Versions: Total Poll Lite versions through 4.8.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 4.8.6,...

PT-2024-13819 · Ashish Ajani · Wp Simple Html Sitemap

Name of the Vulnerable Software and Affected Versions: Ashish Ajani WP Simple HTML Sitemap versions 2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...