CVE-2023-45591

creationtimestamp| type| source ---|---|--- 2024-03-05 13:28:10+00:00| seen| https://t.me/ctinow/200212 2024-03-05 13:28:30+00:00| seen| https://t.me/ctinow/200226...

Fedora 38 : dotnet7.0 (2024-04b568cd49)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-04b568cd49 advisory. This is the February 2024 update for .NET 7. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.16/7.0.16.md - SDK:...

RHEL 9 : firefox (RHSA-2024:0983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0983 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

SUSE SLES15: postgresql12 / postgresql12-contrib / postgresql12-devel / etc (SUSE-SU-2024:0523-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0523-1 advisory. Upgrade to 12.18: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY bsc1219679...

Resource Exhaustion

Overview Affected versions of this package are vulnerable to Resource Exhaustion due to improper handling of certain requests in applications using SignalR. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users...

Resource Exhaustion

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Resource Exhaustion due to improper handling of certain...

Resource Exhaustion

Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Resource Exhaustion due to improper handling of certa...

a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1150 more potentially affected by unknown CVE via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.1.13, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q8-GHMQ-63VF...

CVE-2022-25147

creationtimestamp| type| source ---|---|--- 2024-02-08 19:12:06+00:00| seen| https://t.me/ctinow/181553 2024-02-08 19:41:48+00:00| seen| https://t.me/ctinow/181588 2024-03-15 11:26:52+00:00| seen| https://t.me/ctinow/208642 2025-04-15 10:00:00+00:00| seen|...

SUSE SLES15: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2024:0329-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0329-1 advisory. - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character bsc1210638. Tenable has extracted the...

GHSA-V269-RRR6-CX6R

creationtimestamp| type| source ---|---|--- 2024-02-02 21:21:46+00:00| seen| https://t.me/ctinow/178280...

Fedora 39 : kernel (2024-50ab089b1d)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-50ab089b1d advisory. The 6.6.14 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

@aragonite/vbox-runner (>=0.0.1, <=0.0.2), @arisan/streamer2 (>=0.0.0, <=0.1.4) +116 more potentially affected by CVE-2024-21488 via network (>=0.0.12, <=0.6.1)

network NPM version =0.0.12, =0.0.1, =0.0.0, =1.0.0, =1.0.0-alpha-13, =0.0.3, =1.0.0, =0.0.0, =0.0.0, =0.0.0-beta.0, =3.0.0, =0.4.0, =1.0.0, =1.2.11 and more Source cves: CVE-2024-21488 Source advisory: OSV:GHSA-VVH2-82C7-PPFG...

CloudLinux CageFS 7.1.1-1 Token Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CloudLinux CageFS Token Disclosure Link: https://github.com/sbaresearch/advisories/tree/public/2020/SBA-ADV-20200707-01CloudLinuxCageFSTokenDisclosure Vulnerability Overview CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a...

Atlassian Jira Service Management Data Center and Server < 4.20.30 / 5.4.x < 5.4.15 / 5.7.x < 5.12.2 (JSDSERVER-14958)

The version of Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-14958 advisory. - Server-Side Request Forgery SSRF vulnerability in Apache Software Foundation Apache XML Graphics Batik.This...

CentOS 7 : kernel-rt (RHSA-2023:7424)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7424 advisory. - Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may allo...

PT-2024-15481 · Codeastro · Codeastro Vehicle Booking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Vehicle Booking System version 1.0 Description: A problematic issue was found in the User Registration component, specifically in the file usr/usr-register.php. The manipulation of the Full Name, Last Name, or Address arguments with...

@askcodebase/wrangler (>=3.15.0, <=3.15.8), @astrojs/cloudflare (>=0.0.0-404-fix-20231115224256, <=8.0.1) +17 more potentially affected by CVE-2023-7078 via miniflare (>=3.20230904.0, <=3.20231030.1)

miniflare NPM version =3.20230904.0, =3.15.0, =0.0.0-404-fix-20231115224256, =1.0.274, =0.0.0-1e516e3, =0.9.0, =0.0.5, =0.2.0, =0.0.1, =0.0.6, =0.0.0-next-00210fa-20230928143646, =0.0.0-next-00210fa-20230928143646, =0.0.1, =0.0.1, =1.0.6, =2.0.7 and more Source cves: CVE-2023-7078 Source advisory...

Fedora 39 : proftpd (2023-153404713b)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-153404713b advisory. Security fix for CVE-2023-48795 Terrapin SSH protocol attack, affecting modsftp. Tenable has extracted the preceding description block directly from...

SUSE SLES12 Security Update : kernel (Live Patch 42 for SLE 12 SP5) (SUSE-SU-2023:4799-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:4799-1 advisory. This update for the Linux Kernel 4.12.14-122156 fixes one issue. The following security issue was fixed: - CVE-2023-4622: Fixed a use-after-free...