CentOS 8 : microcode_ctl (CESA-2020:2431)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2431 advisory. - hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 - hw: Vector Register Data Sampling CVE-2020-0548 - hw: L1D Cache Eviction Sampling...

amethyst_nphysics (>=0.0.1, <=0.2.0), arci-urdf-viz (>=0.0.1, <=0.1.0) +52 more potentially affected by unknown CVE via ncollide3d (>=0.15.4, <=0.33.0)

ncollide3d CARGO version =0.15.4, =0.0.1, =0.0.1, =0.1.1, =0.1.0, =0.3.0, =0.12.0, =0.2.0, =0.2.0, =0.3.0, =0.2.0, =0.2.2 - f3lsurface 0.2.0 - fere 0.0.0 - fere-common 0.0.0 - fere-resources 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0150...

PT-2021-14654 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.274 and earlier, LTS versions 2.263.1 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which is exploitable by attackers able to specify display names or IDs of item types shown...

PYSEC-2021-5

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

ca-reservoir-status (1.0.0) potentially affected by CVE-2020-28425 via curljs (0.1.2)

curljs NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on curljs and may be impacted: - ca-reservoir-status 1.0.0 Source cves: CVE-2020-28425 Source advisory: SNYK:JS-CURLJS-1050404...

Cisco Security Manager Java Deserialization Vulnerabilities

Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied content by the...

Ubuntu: Security Advisory (USN-4620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1111 more potentially affected by CVE-2020-28481 via socket.io (>=2.0.1, <=2.3.0)

socket.io NPM version =2.0.1, =4.11.25, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =2018.7.11-0, =0.1.14, =0.0.1, =0.0.1, =1.0.0-alpha.18, =1.0.0-feature-e945fc-k9e8d9l7 and more Source cves: CVE-2020-28481 Source advisory: SNYK:JS-SOCKETIO-1024859...

Critical Flaws Discovered in Popular Industrial Remote Access Systems

Cybersecurity researchers have found critical security flaws in two popular industrial remote access systems that can be exploited to ban access to industrial production floors, hack into company networks, tamper with data, and even steal sensitive business secrets. The flaws, discovered by Tel...

Fedora: Security Advisory for ghc-hakyll (FEDORA-2020-c39d7a562c)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cisco IOS XE Software Arbitrary Code Execution Vulnerability

A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system OS of an affected device. The vulnerability is due to...

untitled-js (>=1.0.0, <=1.0.9) potentially affected by unknown CVE via untitled-model (1.0.5)

untitled-model NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on untitled-model and may be impacted: - untitled-js =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-HQ8G-QQ57-5275...

Juniper Junos BGP DoS (JSA11024)

According to the self reported version of Junos OS on the remote device it is affected by a denial of service vulnerability as referenced in the JSA11024 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

adaptive-fs (>=1.1.0, <=1.3.2), ajato (0.0.1-wip) +1 more potentially affected by unknown CVE via mogoose (0.0.1-security)

mogoose NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mogoose and may be impacted: - adaptive-fs =1.1.0, =1.0.48, =1.1.26 Source cves: unknown CVE Source advisory: OSV:GHSA-5MM9-55C9-P5R7...

jl-wechat-sdk (>=1.0.0, <=1.2.3) potentially affected by unknown CVE via crpyto-js (0.0.1-security)

crpyto-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-73C6-VWJH-G3QH...

@mojaloop/central-services-health (9.1.0) potentially affected by unknown CVE via @hapi/hapi (19.1.0)

@hapi/hapi NPM version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hapi and may be impacted: - @mojaloop/central-services-health 9.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-23VW-MHV5-GRV5...

3nit-utils (>=0.11.1, <=0.23.0), @alinasoft/db (>=0.0.1, <=0.2.0) +697 more potentially affected by unknown CVE via content (>=4.0.3, <=4.0.6)

content NPM version =4.0.3, =0.11.1, =0.0.1, =0.9.0, =1.2.7, =0.0.1, =1.2.2-rc.0, =0.1.0, =2.2.0-alpha.6, =0.2.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =2.2.0-alpha.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5854-JVXX-2CG9...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) +7 more potentially affected by unknown CVE via @hapi/accept (4.0.1)

@hapi/accept NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/accept and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =0.0.3, =0.27.0, =0.27.0, =0.9.0, =2.0.4, =5.0.2 Source cves: unknown CVE Source advisory:...

@dudadev/zip-modifier-utils (1.1.0), @newsssticketing/common (>=1.0.4, <=1.0.16) +4 more potentially affected by unknown CVE via experss (0.0.1-security)

experss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils 1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...

ryosukesuzuki (>=1.0.0, <=1.0.2) potentially affected by unknown CVE via ascii-art (1.4.3)

ascii-art NPM version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on ascii-art and may be impacted: - ryosukesuzuki =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-9HQJ-38J2-5JGM...