Fedora 37 : phpMyAdmin (2023-179053442b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-179053442b advisory. phpMyAdmin 5.2.1 This is a bugfix release that also contains a security fix for an XSS vulnerability in the drag-and-drop upload functionality PMASA-2023-01...

Cisco Nexus Dashboard Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user...

SUSE CVE-2006-0207

Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the 1 session extension aka ext/session and the 2 header function...

Ubuntu 16.04 ESM : Git vulnerabilities (USN-5810-3)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5810-3 advisory. USN-5810-1 fixed several vulnerabilities in Git. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding...

a2 (>=0.5.0-alpha.1, <=0.5.3), aahc (0.1.0) +4871 more potentially affected by unknown CVE via tokio (>=0.2.0-alpha.1, <=1.18.2)

tokio CARGO version =0.2.0-alpha.1, =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q83-7CQ4-P6WG...

Fedora 36 : binwalk (2023-23047a5f4f)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-23047a5f4f advisory. Security fix for CVE-2022-4510 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

CVE-2015-0250

creationtimestamp| type| source ---|---|--- 2023-01-30 14:40:15+00:00| published-proof-of-concept| https://t.me/arm1tage/485 2024-10-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1420/...

Ubuntu: Security Advisory (USN-4787-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : kernel (RHSA-2023:0187)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0187 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: hw: cpu: LFENCE/JMP Mitigation Update for...

@didhubdev/core (>=0.0.11, <=0.0.39), @domedb/plugin-graphql (1.0.0) +14 more potentially affected by CVE-2023-22477 via mercurius (>=9.3.5, <=11.4.0)

mercurius NPM version =9.3.5, =0.0.11, =0.2.42, =2.37.0, =0.4.0, =0.6.0, =1.1.0, =0.0.24, =1.0.0, =1.0.1 and more Source cves: CVE-2023-22477 Source advisory: OSV:GHSA-CM8H-Q92V-XCFC...

PT-2022-27924 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A command injection issue was found in the setup wizard mydlink function, specifically via the sys service parameter in the sub 4104B8 function. Recommendations: For TRENDnet TEW755AP version...

K000130396: Keccak XKCP SHA-3 vulnerability CVE-2022-37454

Security Advisory Description The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

Fedora 36 : mediawiki (2022-185482f0a7)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-185482f0a7 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/thread/DMQKMFSH4K7KLBXWZTDBGI2PWLLHJHJZ/...

PT-2022-25061 · WordPress · Responsive Lightbox2

Name of the Vulnerable Software and Affected Versions: Responsive Lightbox2 WordPress plugin versions prior to 1.0.4 Description: The issue is related to the lack of validation and escaping of some shortcode attributes, which could allow users with a role as low as contributor to perform Stored...

abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7), agora (>=0.0.5, <=0.1.2) +440 more potentially affected by unknown CVE via secp256k1 (>=0.15.3, <=0.21.3)

secp256k1 CARGO version =0.15.3, =0.2.0-beta.4, =0.0.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.0.1, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-969W-Q74Q-9J8V...

PT-2022-35401 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue concerns the handling of real but unexpected device interrupts in the i2c designware component. The actual impact and attack plausibility have not yet been proven. Recommendations...

OESA-2022-2058 pixman security update

Pixman is a low-level software library for pixel manipulation, providing features such\ \as image compositing and trapezoid rasterization.\ Security Fixes: In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer...

@fusuma/task-pdf (>=1.2.0, <=1.16.0), @infosupport/kc-cli (>=2.2.0, <=3.1.0) +13 more potentially affected by CVE-2022-25892 via hummus (>=1.0.31, <=1.0.110)

hummus NPM version =1.0.31, =1.2.0, =2.2.0, =1.0.0, =1.0.46, =0.0.10, =2.0.0, =1.0.0, =0.1.0, =0.1.2, =1.0.1, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.0.13 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-HUMMUS-3091138...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K31523465)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.1 / 15.1.7 / 16.1.3.1 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K31523465 advisory. - On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1....

PT-2022-26290 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 15.03.06.23 Description: The issue is related to a stack overflow vulnerability. This vulnerability can be exploited via the "/goform/formSetClientState" API endpoint. Recommendations: For Tenda AC10 version 15.03.06.23, as...