Amazon Linux 2023 : libvpx, libvpx-devel, libvpx-utils (ALAS2023-2023-413)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-413 advisory. VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 Tenable has extracted the preceding description block directly from the tested product security...

Low: shadow-utils

Issue Overview: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve t...

Amazon Linux AMI : shadow-utils (ALAS-2023-1873)

The version of shadow-utils installed on the remote host is prior to 4.1.4.2-13.11. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1873 advisory. A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password...

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2023-3020)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

Mageia: Security Advisory (MGASA-2023-0294)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated shadow-utils packages fix a security vulnerability

The updated packages fix a security vulnerability: Potential password leak. CVE-2023-4641...

MGASA-2023-0294 Updated shadow-utils packages fix a security vulnerability

The updated packages fix a security vulnerability: Potential password leak. CVE-2023-4641...

Ubuntu 16.04 ESM : Crypto++ vulnerability (USN-4827-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4827-1 advisory. It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information. Tenable has extracte...

Oracle WebLogic Server (October 2023 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the October 2023 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...

SUSE SLES15 Security Update : shadow (SUSE-SU-2023:4025-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4025-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding description block directly from the SUSE...

SUSE SLES15 Security Update : shadow (SUSE-SU-2023:4027-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4027-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2023:4024-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4024-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding descriptio...

SUSE SLES12 Security Update : shadow (SUSE-SU-2023:4023-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4023-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding description block directly from the SUSE...

iscsi-initiator-utils bug fix update

An update is available for iscsi-initiator-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The iscsi-initiator-utils packages provide the server daemon fo...

Amazon Linux 2 : shadow-utils (ALAS-2023-2247)

The version of shadow-utils installed on the remote host is prior to 4.1.5.1-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2247 advisory. A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fai...

Low: shadow-utils

Issue Overview: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve t...

Memory Leak

libgpac.so is vulnerable to a Memory Leak. The vulnerability is caused by a defect in the gflistnew function at utils/list.c . This can lead to unexpected behavior resulting from a low memory condition or Denial Of Service DOS by crashing or hanging the program...