34 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-5697
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox...
GHSA-FV92-FJC5-JJ9H vulnerabilities
Vulnerabilities for packages: nri-discovery-kubernetes, tempo, cloud-sql-proxy, tekton-chains, spark-operator, trivy, boring-registry, amazon-cloudwatch-agent, nri-kubernetes, argo-workflows, kots, kyverno-policy-reporter, glab, opentelemetry-collector, gitlab-cng, wgcf, istio, tflint,...
Ubuntu: Security Advisory (USN-7482-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1325)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-CX7H-H87R-JPGR vulnerabilities
Vulnerabilities for packages: cargo-audit...
Ubuntu: Security Advisory (USN-7321-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2023-34327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensio...
GHSA-V4V9-V4WF-9C86 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RHVR-6W8C-6V7W vulnerabilities
Vulnerabilities for packages: mattermost-fips, mattermost...
BELL-CVE-2025-0684
Bulletin has no description...
openSUSE: Security Advisory for gstreamer (SUSE-SU-2025:0069-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Drupal 7.x < 7.102 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. - Drupal core...
CVE-2024-9264
The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...
GHSA-JFVP-7X6P-H2PV vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, cluster-autoscaler-fips, opentelemetry-collector-contrib, runc, cadvisor, kubernetes, node-feature-discovery, grype, syft, k3s, grafana-alloy, podman, ctop, neuvector, cluster-autoscaler, neuvector-fips, grafana-alloy-fips, buildah,...
GHSA-JMVP-698C-4X3W vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips...
WordPress 5.3.x < 5.3.18 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A Cross-Site Scripting XSS vulnerability affecting the HTML API. - A Cross-Site Scripting XSS vulnerability affecting the Template Part block. - A path traversal issue...
RHEL 7 : libpcap (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libpcap: Resource exhaustion during PHB header length validation CVE-2019-15165 Note that Nessus has not tested for...
RHEL 6 : python-certifi (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-certifi: Removal of e-Tugra root certificate CVE-2023-37920 Note that Nessus has not tested for this issue b...
GHSA-2MQJ-M65W-JGHX vulnerabilities
Vulnerabilities for packages: checkov...
Exploit for Deserialization of Untrusted Data in Apache Kafka_Connect
This tool is intended for security testing purposes only. Do not...