34 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-5697
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox...
GHSA-FV92-FJC5-JJ9H vulnerabilities
Vulnerabilities for packages: kubecolor, docker-compose, glow, cluster-api, pgtimetable, boring-registry, opa, k9s, kots, conftest, goreleaser, nri-discovery-kubernetes, kyverno-policy-reporter-ui, kyverno-policy-reporter, guac, openfga, atlantis, grafana-alloy, spark-operator, jitsucom-bulker,...
Ubuntu: Security Advisory (USN-7482-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1325)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-CX7H-H87R-JPGR vulnerabilities
Vulnerabilities for packages: cargo-audit...
Ubuntu: Security Advisory (USN-7321-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2023-34327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensio...
GHSA-V4V9-V4WF-9C86 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RHVR-6W8C-6V7W vulnerabilities
Vulnerabilities for packages: mattermost, mattermost-fips...
BELL-CVE-2025-0684
Bulletin has no description...
openSUSE: Security Advisory for gstreamer (SUSE-SU-2025:0069-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Drupal 7.x < 7.102 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. - Drupal core...
CVE-2024-9264
The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...
GHSA-JFVP-7X6P-H2PV vulnerabilities
Vulnerabilities for packages: eks-distro, grafana-alloy-fips, grype, syft, node-feature-discovery, docker, cadvisor, k3s, ingress-nginx-controller-fips, grafana-alloy, ctop, cluster-autoscaler, buildah, neuvector-fips, ingress-nginx-controller, kubernetes, opentelemetry-collector-contrib-fips,...
GHSA-JMVP-698C-4X3W vulnerabilities
Vulnerabilities for packages: argo-cd-fips, argo-cd...
WordPress 5.3.x < 5.3.18 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A Cross-Site Scripting XSS vulnerability affecting the HTML API. - A Cross-Site Scripting XSS vulnerability affecting the Template Part block. - A path traversal issue...
RHEL 7 : libpcap (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libpcap: Resource exhaustion during PHB header length validation CVE-2019-15165 Note that Nessus has not tested for...
RHEL 6 : python-certifi (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-certifi: Removal of e-Tugra root certificate CVE-2023-37920 Note that Nessus has not tested for this issue b...
