Fedora 40 : tomcat (2024-2a31fce8eb)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2a31fce8eb advisory. Automatic update for tomcat-9.0.98-1.fc40. Changelog for tomcat Mon Dec 09 2024 Packit - 1:9.0.98-1 - Update to version 9.0.98 - Resolves: rhbz2331168 Mon De...

dbs-arch (>=0.2.2, <=0.2.3), dbs-boot (>=0.3.0, <=0.4.0) +7 more potentially affected by unknown CVE via kvm-ioctls (>=0.6.1, <=0.18.0)

kvm-ioctls CARGO version =0.6.1, =0.2.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.29, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3QX8-RV27-J6GP...

Amazon Linux 2 : apr (ALAS-2024-2721)

The version of apr installed on the remote host is prior to 1.7.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2721 advisory. Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory...

AlmaLinux 9 : skopeo (ALSA-2024:11217)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11217 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenable...

AlmaLinux 9 : python3.11-urllib3 (ALSA-2024:11238)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:11238 advisory. urllib3: Request body not stripped after redirect from 303 status changes request method to GET CVE-2023-45803 Tenable has extracted the preceding description blo...

Amazon Linux 2 : postgresql (ALASPOSTGRESQL13-2024-008)

The version of postgresql installed on the remote host is prior to 13.17-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2POSTGRESQL13-2024-008 advisory. Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change...

GHSA-QMCW-H4F9-J3H3

creationtimestamp| type| source ---|---|--- 2024-12-20 19:55:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113686907311266678...

Fedora 40 : jupyterlab (2024-cd98f29570)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-cd98f29570 advisory. Update to 4.3.3 rhbz2331357 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CVE-2024-26256

creationtimestamp| type| source ---|---|--- 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1698/...

RHEL 8 : kernel (RHSA-2024:11485)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11485 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: gro: fix ownership transfer...

PT-2024-17343 · WordPress · The Travel Booking Wordpress Theme

Name of the Vulnerable Software and Affected Versions: The Travel Booking WordPress Theme versions up to, and including, 3.1.6 Description: The issue is a blind time-based SQL Injection vulnerability. It affects the order id parameter due to insufficient escaping on the user-supplied parameter an...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-urllib3_1 (SUSE-SU-2024:4358-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:4358-1 advisory. - CVE-2024-37891: Fixed proxy-authorization request header not stripped during cross-origin redirects...

CVE-2024-39703

creationtimestamp| type| source ---|---|--- 2024-12-17 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-01 2024-12-18 08:40:33+00:00| seen| https://t.me/cvedetector/13173...

CISCO-SA-20190501-FABRIC

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:53+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794783383554...

CISCO-SA-20190925-AWR

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:49+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793767675787...

CISCO-SA-20170726-ANICRL

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:30+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793199285399...

CISCO-SA-20190703-SBSS

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:24+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793047282674...

CISCO-SA-20190703-NFVIS

creationtimestamp| type| source ---|---|--- 2024-12-17 06:40:27+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792727876196...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Spring Framework vulnerability (USN-7165-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7165-1 advisory. It was discovered that the Spring Framework incorrectly handled web requests via data binding. An attacker could...

Oracle Linux 8 : pcs (ELSA-2024-10987)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10987 advisory. 0.10.18-2.0.1.el810.3 - Replace HAM-logo.png with a generic one 0.10.18-2.el810.3 - Prevented any future HTTP header-based attacks on puma/sinatra by removing...