Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2970)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : hplip (SUSE-SU-2024:4076-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4076-1 advisory. - hpmud: sanitize printer serial number bsc1209401 Tenable has extracted the preceding description block...

Fedora 40 : python3.11 (2024-5ea38dfb80)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5ea38dfb80 advisory. Python 3.11.11 security release. Security content in this release -------------------------------- - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to...

PT-2024-16971 · WordPress · Hostfact Bestelformulier Integratie Plugin

Name of the Vulnerable Software and Affected Versions: HostFact bestelformulier integratie plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'bestelformulier' shortcode due to insufficient input sanitization a...

RHEL 9 : Red Hat Ceph Storage 8.0 (RHSA-2024:10956)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10956 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...

ABB Cylon Aspect 3.08.02 (API/Servlets) Server-Side Request Forgery (SSRF)

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description ABB Cylon Aspect is affected by multiple Server-Side Request Forgery...

GHSA-HHFG-FWRW-87W7

creationtimestamp| type| source ---|---|--- 2024-12-10 23:12:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113631058808905104...

CVE-2024-11634

creationtimestamp| type| source ---|---|--- 2024-12-10 20:49:46+00:00| seen| https://t.me/cvedetector/12553 2024-12-11 18:00:23+00:00| seen| https://t.me/itsecnews/4950 2024-12-24 12:43:37+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2024-0484 2025-09-16 23:16:38+00:00| seen|...

CVE-2024-490597

creationtimestamp| type| source ---|---|--- 2024-12-10 18:33:29+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2024-0471...

cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)

cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q97-M5RC-P3GP...

CVE-2024-47977

creationtimestamp| type| source ---|---|--- 2024-12-10 10:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113628075998358996 2024-12-10 13:17:28+00:00| seen| https://t.me/cvedetector/12494 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1692/...

Adobe Premiere Pro < 24.6.4 / 25.0 < 25.1 Arbitrary code execution (APSB24-104)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 24.6.4, 25.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-104 advisory. - Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...

Fedora 41 : python-python-multipart (2024-92de63698e)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-92de63698e advisory. Security update for CVE-2024-53981. 0.0.19 2024-11-30 Don't warn when CRLF is found after last boundary on MultipartParser. 0.0.18 2024-11-28 Hard break if...

Adobe FrameMaker 2020 < 16.0.7 (2020.0.7) / Adobe FrameMaker 2022 < 17.0.5 (2022.0.5) Arbitrary Code Execution (APSB24-106)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.7 / Adobe FrameMaker 2022 17.0.5. It is, therefore, affected by a vulnerability as referenced in the apsb24-106 advisory. - Adobe Framemaker versions 2020.7, 2022.5 and earlier are affected...

Splunk Enterprise 9.1.0 < 9.1.7, 9.2.0 < 9.2.4, 9.3.0 < 9.3.2 (SVD-2024-1201)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-1201 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fedora 41 : retsnoop / rust-rbspy (2024-aa246ab1a3)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-aa246ab1a3 advisory. Rebuild affected applications with ruzstd v0.7.3 to address RUSTSEC-2024-0400. Tenable has extracted the preceding description block directly from the Fedora...

RHEL 9 : postgresql:13 (RHSA-2024:10879)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10879 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL PL/Perl environment variable...

BELL-CVE-2024-53141

Bulletin has no description...

Ubuntu 16.04 LTS : Apache Shiro vulnerability (USN-7139-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7139-1 advisory. It was discovered that Apache Shiro used a static cipher within the Remember Me feature inside authentication by default. An attacker could possibly use this issu...

acir (>=0.44.0, <=0.46.0), age (>=0.7.0, <=0.9.3) +154 more potentially affected by unknown CVE via pprof (>=0.3.23, <=0.13.0)

pprof CARGO version =0.3.23, =0.44.0, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.2, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1005.0, =0.1010.2 - binario 0.0.2 - bmssp 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0408...