PT-2024-34972 · Unknown · Kiran Patil Location Click Map

Name of the Vulnerable Software and Affected Versions: Kiran Patil Location Click Map versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Kiran Patil Location...

PT-2024-34795 · Unknown · Random Featured Post

Name of the Vulnerable Software and Affected Versions: Random Featured Post versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2024-34816 · WordPress · Otter - Gutenberg Block

Name of the Vulnerable Software and Affected Versions: Otter - Gutenberg Block versions 3.0.3 and earlier Description: A Missing Authorization vulnerability in Otter - Gutenberg Block allows for exploiting incorrectly configured access control security levels. This issue is related to broken acce...

Oracle Linux 9 : bluez (ELSA-2024-9413)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9413 advisory. 5.72-2 - Bump release to rebuild for RHEL-9.5 5.72-1 - Update to 5.72 Tenable has extracted the preceding description block directly from the Oracle...

PT-2024-16147 · Sonaar · Mp3 Audio Player – Music Player

Name of the Vulnerable Software and Affected Versions: The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress versions up to, and including, 5.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's sonaar audioplayer shortcode due t...

PT-2024-16895 · Korenix · Korenix Jetport 5601

Name of the Vulnerable Software and Affected Versions: Korenix JetPort 5601 versions through 1.2 Description: The pathname of the root directory to a Restricted Directory allows Path Traversal. This issue enables Path Traversal in Korenix JetPort 5601. Recommendations: For versions through 1.2,...

PT-2024-35271 · WordPress · Pressaholic Wordpress Video Robot - The Ultimate Video Importer

Name of the Vulnerable Software and Affected Versions: Pressaholic WordPress Video Robot - The Ultimate Video Importer versions 1.20.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This...

PT-2024-35255 · Skpstorm · Skpstorm Sk Wp Settings Backup

Name of the Vulnerable Software and Affected Versions: Skpstorm SK WP Settings Backup versions n/a through 1.0 Description: A Cross-Site Request Forgery CSRF vulnerability in Skpstorm SK WP Settings Backup allows Object Injection. This issue enables an attacker to inject objects, potentially...

PT-2024-35252 · Unknown · Stephen Cui Xin

Name of the Vulnerable Software and Affected Versions: Stephen Cui Xin versions n/a through 1.0.8.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a weakness in the software that can be exploited. Recommendations: For versions n/a...

PT-2024-35253 · Unknown · Dmc Airin Blog

Name of the Vulnerable Software and Affected Versions: DMC Airin Blog versions 1.6.1 and earlier Description: The issue is related to the deserialization of untrusted data, which allows object injection in DMC Airin Blog. Recommendations: For versions 1.6.1 and earlier, update to a version later...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. CVE-2024-36484 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."...

PT-2024-16805

Name of the Vulnerable Software and Affected Versions MDaemon Email Server versions prior to 24.5.1c Description An XSS issue was discovered in MDaemon Email Server, allowing a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window by sending an HTML...

Fedora 41 : unbound (2024-a5d6cd9f0a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a5d6cd9f0a advisory. Fixed builds on F41. Fixes CVE-2024-8508 - https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1 Tenable has extracted the preceding...

Fedora 41 : golang-opentelemetry-contrib / golang-opentelemetry-otel (2024-971a3a4ef7)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-971a3a4ef7 advisory. Update opentelemetry stack to 1.17 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : moodle (2022-74a9c8e95f)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-74a9c8e95f advisory. Fixes for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2024-20405

Name of the Vulnerable Software and Affected Versions Athonet vEPC MME version 11.4.0 Description The issue is related to an invalid memory access when handling the ProtocolIE ID field of E-RAB Setup List Context SURes messages. This allows attackers to cause a Denial of Service DoS to the cellul...

Fedora 37 : krb5 (2022-a1747aca80)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-a1747aca80 advisory. Security fix for CVE-2022-42898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Important: xorg-x11-server

Issue Overview: A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions wher...

PT-2024-8140

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 17.1 PostgreSQL versions prior to 16.5 PostgreSQL versions prior to 15.9 PostgreSQL versions prior to 14.14 PostgreSQL versions prior to 13.17 PostgreSQL versions prior to 12.21 Description: The issue arises from...

Fedora 37 : bash (2022-bf387ff344)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bf387ff344 advisory. Add a null check in parameterbracetransform function Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...