SUSE SLES15 / openSUSE 15 Security Update : buildah (SUSE-SU-2023:2178-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2178-1 advisory. - rebuild the package with the go 19.9 secure release bsc1200441. Tenable has extracted the preceding description block direct...

SUSE: Security Advisory (SUSE-SU-2023:2173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-2735 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Painter versions 8.3.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...

PT-2023-23465 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo Lms version 1.11.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the course category parameters. This enables the attacker to perform unauthorized actions on the system...

PT-2023-19562 · Hu Manity.Co · Hu-Manity.Co Cookie Notice & Compliance For Gdpr / Ccpa

Name of the Vulnerable Software and Affected Versions: Hu-manity.Co Cookie Notice & Compliance for GDPR / CCPA plugin versions = 2.4.6 Description: The issue is related to an Authenticated Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious...

PT-2023-18267 · Samsung · Samsung Blockchain Keystore

Name of the Vulnerable Software and Affected Versions: Samsung Blockchain Keystore versions prior to 1.3.12.1 Description: The issue is related to an Out-of-bounds Read vulnerability that occurs while processing CMD COLDWALLET BTC SET PRV UTXO in the bc core trustlet. This allows a local attacker...

SUSE: Security Advisory (SUSE-SU-2023:1961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-18572 · Alf.Io · Alf.Io

Name of the Vulnerable Software and Affected Versions: alfio-event/alf.io versions prior to 2.0-M4-2304 Description: The issue is related to the improper neutralization of special elements used in a template engine. This problem affects the GitHub repository alfio-event/alf.io. Recommendations: F...

PT-2023-14586 · WordPress · Activity Reactions For Buddypress

Name of the Vulnerable Software and Affected Versions: Activity Reactions For Buddypress plugin versions = 1.0.22 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

Ubuntu: Security Advisory (USN-5855-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-12903 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSandbox versions 3.0.x through 4.2.0 Description: The issue allows a remote and authenticated attacker with read permission to retrieve arbitrary files from the underlying Linux system via a crafted HTTP request. This is due to ...

PT-2023-19906 · Kiboko · Kiboko Labs Arigato Autoresponder/Newsletter

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Arigato Autoresponder and Newsletter plugin versions = 2.7.1.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to inject malicious scripts into the...

ABB Pulsar Plus Controller

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: Pulsar Plus Controller Vulnerabilities: Use of Insufficiently Random Values, Cross-Site Request Forgery CSRF 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

PT-2023-15429 · Usersnap · Usersnap

Name of the Vulnerable Software and Affected Versions: Usersnap plugin versions prior to 4.17 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For versions prior to 4.17, update to...

PT-2023-13018 · WordPress · Pankaj Jha Wordpress Ping Optimizer

Name of the Vulnerable Software and Affected Versions: Pankaj Jha WordPress Ping Optimizer plugin versions = 2.35.1.2.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

Important: nodejs

Issue Overview: This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library. CVE-2022-25881 Affected Packages: nodejs Issue...

RHEL 7 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 7.4 (RHSA-2023:1185)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1185 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This asynchrono...

Debian: Security Advisory (DLA-238-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-35479 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue is related to a wrong-direction WARNING in the plusb.c file, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

Ubuntu: Security Advisory (USN-5821-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...