34 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-5697
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox...
GHSA-FV92-FJC5-JJ9H vulnerabilities
Vulnerabilities for packages: spark-operator, clusterctl, opa, zarf, cloud-sql-proxy, swagger, flux-source-controller, terraform-mcp-server, traefik, kubecolor, grafana, k9s, steampipe, kyverno-policy-reporter, tekton-chains, kyverno-policy-reporter-ui, kyverno, argo-events, glab, kube-bench,...
Ubuntu: Security Advisory (USN-7482-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1325)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-CX7H-H87R-JPGR vulnerabilities
Vulnerabilities for packages: cargo-audit...
Ubuntu: Security Advisory (USN-7321-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2023-34327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensio...
GHSA-V4V9-V4WF-9C86 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RHVR-6W8C-6V7W vulnerabilities
Vulnerabilities for packages: mattermost-fips, mattermost...
BELL-CVE-2025-0684
Bulletin has no description...
openSUSE: Security Advisory for gstreamer (SUSE-SU-2025:0069-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Drupal 7.x < 7.102 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. - Drupal core...
CVE-2024-9264
The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...
GHSA-JFVP-7X6P-H2PV vulnerabilities
Vulnerabilities for packages: runc, neuvector-fips, buildah, grype, k8s-device-plugin, grafana-alloy-fips, opentelemetry-collector-contrib-fips, neuvector, ingress-nginx-controller, opentelemetry-collector-contrib, cluster-autoscaler-fips, syft, cadvisor, ctop, cadvisor-fips,...
GHSA-JMVP-698C-4X3W vulnerabilities
Vulnerabilities for packages: argo-cd-fips, argo-cd...
WordPress 5.3.x < 5.3.18 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A Cross-Site Scripting XSS vulnerability affecting the HTML API. - A Cross-Site Scripting XSS vulnerability affecting the Template Part block. - A path traversal issue...
RHEL 7 : libpcap (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libpcap: Resource exhaustion during PHB header length validation CVE-2019-15165 Note that Nessus has not tested for...
RHEL 6 : python-certifi (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-certifi: Removal of e-Tugra root certificate CVE-2023-37920 Note that Nessus has not tested for this issue b...
GHSA-2MQJ-M65W-JGHX vulnerabilities
Vulnerabilities for packages: checkov...
Exploit for Deserialization of Untrusted Data in Apache Kafka_Connect
This tool is intended for security testing purposes only. Do not...