BELL-CVE-2023-50246

Bulletin has no description...

RHEL 9 : kpatch-patch (RHSA-2023:7734)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7734 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Atlassian Jira Service Management Assets Discovery < 6.2.0 (JSDSERVER-14925)

The version of the Atlassian Jira Service Management Assets Discovery formerly Insight Discovery app running on the remote host is prior to 6.2.0. It is, therefore, affected by a remote code execution vulnerability as referenced in the JSDSERVER-14925 advisory. The vulnerability exists between th...

@amitojsingh366/pioneer-react (>=0.0.3, <=0.0.4), @angular-devkit/build-angular (>=17.0.0-rc.0, <=17.0.5) +51 more potentially affected by CVE-2023-49293 via vite (4.5.0)

vite NPM version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on vite and may be impacted: - @amitojsingh366/pioneer-react =0.0.3, =17.0.0-rc.0, =0.20.0, =1.0.0-rc.5, =0.5.4, =0.1.0, =17.0.0-next.11, =17.0.0-next.11, =0.0.0, =0.2.0,...

Fedora 37 : pack (2023-5029b92850)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5029b92850 advisory. fix for CVE-2023-39325 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

PT-2023-7131 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.0 and earlier Adobe Audition versions 23.6.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Audition when parsing a crafted file, which could result in a read past the...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-3217)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Plugin WP Cookie Consent Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plug-in. WordPress Plugin WP Cookie Consent for GDP...

RHEL 9 : toolbox (RHSA-2023:6346)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6346 advisory. Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman...

Fedora 39 : python-pyramid (2023-70baf5e2fe)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-70baf5e2fe advisory. - Update to 2.0.2 - Fixes CVE-2023-40587 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

PT-2023-21245 · WordPress · Wp Reroute Email

Name of the Vulnerable Software and Affected Versions: WP Reroute Email versions 1.4.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

CVE-2006-5051

creationtimestamp| type| source ---|---|--- 2023-11-04 23:01:08+00:00| seen| Telegram/6Aoz9gHHke7Iu9l0ZHXfzi7jvKoloOsPlNcoH5gLFX6Kg 2024-07-01 10:01:49+00:00| seen| https://t.me/techb0ltGenona/4551 2024-07-01 15:35:04+00:00| seen| https://t.me/truesecator/5919 2024-07-01 16:07:33+00:00| seen|...

PT-2023-30250 · International Color Consortium · International Color Consortium Demoiccmax

Name of the Vulnerable Software and Affected Versions: International Color Consortium DemoIccMAX version 79ecb74 libIccProfLib2 version 2.1.15 Description: The issue arises from the CIccCLUT::Interp3d method in IccProfLib/IccTagLut.cpp, which attempts to access array elements at out-of-bounds...

PT-2023-32163 · WordPress · Mpoperationlogs

Name of the Vulnerable Software and Affected Versions: MpOperationLogs plugin for WordPress versions up to, and including, 1.0.1 Description: The MpOperationLogs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the IP Request Headers due to insufficient input sanitization and...

fileopsx (>=1.0.1, <=1.0.2), xml2pdf (>=1.0.0, <=1.1.0) potentially affected by CVE-2023-26155 via node-qpdf (1.0.3)

node-qpdf NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on node-qpdf and may be impacted: - fileopsx =1.0.1, =1.0.0, =1.1.0 Source cves: CVE-2023-26155 Source advisory: OSV:GHSA-FPR8-4WVX-J9Q3...

Tenable SecurityCenter < 6.2.0 Multiple Vulnerabilities (TNS-2023-32)

According to its self-reported version, the Tenable SecurityCenter running on the remote host is prior to 6.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-32 advisory. - Security Center leverages third-party software to help provide underlying...

@archey347/uf_blog (0.0.0), @boldreports/angular-reporting-components (>=5.1.20, <=11.1.10) +19 more potentially affected by CVE-2025-3573 via jquery-validation (>=1.14.0, <=1.19.5)

jquery-validation NPM version =1.14.0, =5.1.20, =5.1.20, =5.1.20, =0.0.4, =4.0.0, =5.0.0, =0.0.2, =0.2.2, =3.0.0, =5.0.0-rc.1, =5.0.0-rc.1, =0.11.28, =0.0.8, =0.0.13 and more Source cves: CVE-2025-3573 Source advisory: SNYK:JS-JQUERYVALIDATION-5952285...

Amazon Linux 2 : redis (ALASREDIS6-2023-003)

The version of redis installed on the remote host is prior to 6.2.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2REDIS6-2023-003 advisory. A flaw was found in the Redis database where Lua scripts can be manipulated to overcome ACL rules. This flaw allows an...

CVE-2023-42523

Summary: CVE-2023-42523 affects WithSecure products and causes a remote crash of the scanning engine when unpacking a PE file. Affected products/versions (from documents): WithSecure Client Security 15; WithSecure Server Security 15; WithSecure Email and Server Security 15; WithSecure Elements En...

CVE-2023-4921

creationtimestamp| type| source ---|---|--- 2023-09-13 00:23:12+00:00| seen| https://t.me/cibsecurity/70346 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09 2025-02-14 10:08:17+00:00| seen| Telegram/C6PhCyiqECM0IDK851J7HPVI8j7raGFhmKO3P6pepkdCel8...