2040 matches found
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2024-247-01)
The version of mozilla-firefox installed on the remote host is prior to 115.15.0esr / 128.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-247-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12606)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12606 advisory. - isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284 - tracing: Restructure traceclockglobal to never block Steve...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-26934)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26934 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in...
@directus/api (>=15.0.0, <=20.1.0), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-6534 via directus (>=10.8.3, <=10.13.1)
directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-6534 Source advisory: OSV:GHSA-3FFF-GQW3-VJ86...
BELL-CVE-2024-43883
Bulletin has no description...
CVE-2024-42070
creationtimestamp| type| source ---|---|--- 2024-07-29 18:48:41+00:00| seen| https://t.me/cvedetector/1885 2024-12-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1642/...
acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +868 more potentially affected by unknown CVE via openssl (>=0.2.18, <=0.10.57)
openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0357...
@ibm/rse-api-for-zowe-cli (>=3.2.2, <=4.1.0), @zowe/zowe-explorer-api (>=2.13.0, <=2.15.0) potentially affected by CVE-2024-6833 via @zowe/cli (>=7.18.0, <=7.23.3)
@zowe/cli NPM version =7.18.0, =3.2.2, =2.13.0, =2.15.0 Source cves: CVE-2024-6833 Source advisory: OSV:GHSA-GHGQ-X6WC-6JR5...
PT-2024-28843 · Unknown · Spark Mall B2C Mall
Name of the Vulnerable Software and Affected Versions: Spark Mall B2C Mall versions 1.1.6 and earlier Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the controller/common.php component. Recommendations: For Spark Mall B2C Mall versions 1.1.6 and...
PT-2024-28915 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: Public CMS version 4.0.202302.e Description: The issue is related to an arbitrary file upload vulnerability in the /admin/cmsTemplate/savePlaceMetaData component. This allows attackers to execute arbitrary code by uploading a crafted file...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : git (SUSE-SU-2024:2277-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2277-1 advisory. - CVE-2024-32002: Fix recursive clones on case-insensitive filesystems that support symbolic lin...
kernel: mm/swap: fix race when skipping swapcache
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache The Linux kernel CVE team has assigned CVE-2024-26759 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040304-CVE-2024-26759-45f1@gregkh/T...
BELL-CVE-2024-38475
Bulletin has no description...
@a11ywatch/core (>=0.8.13, <=0.8.15), @a11ywatch/mav (>=0.7.17, <=0.7.27) +91 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=1.9.0, <=1.9.14)
@grpc/grpc-js NPM version =1.9.0, =0.8.13, =0.7.17, =0.9.42, =3.1.3, =0.61.0, =1.61.0, =0.2.2, =0.1.1, =0.0.5, =0.0.6, =0.0.8, =0.0.11, =0.0.5, =1.0.1, =7.1.3 and more Source cves: CVE-2024-37168 Source advisory: OSV:GHSA-7V5V-9H63-CJ86...
Interpretation Conflict
Overview std/archive/zip is a Go standard library package std/archive/zip Affected versions of this package are vulnerable to Interpretation Conflict. Go Vulnerability Report: due to inconsistent handling of certain malformed zip files in the archive/zip process. An attacker can cause different...
RHEL 7 : openssl097a (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - openssl: PKCS7 NULL pointer dereference CVE-2015-0289 Note that Nessus has not tested for this issue but has instea...
PT-2024-35412 · Sonos · Sonos Era 100
Name of the Vulnerable Software and Affected Versions: Sonos Era 100 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this issue...
SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2024:1801-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1801-1 advisory. The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. This update fixes a regression...
PT-2024-40363 · Packagist · Silverstripe/Framework
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A maliciously crafted URL can bypass the offsite redirection protection for BackURL parameters, potentially leading to users entering sensitive data on malicious websites instead of the...