CBL Mariner 2.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...

Malicious code in havas-worldwide (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of Teltonika RUT240 router microprogramming software, related to improper access control, allows attackers to bypass existing security restrictions and gain unauthorized access to the IPv6 WAN interface.

The vulnerability of Teltonika RUT240 router microprogramming software is related to improper access control. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and gain unauthorized access to the IPv6 WAN interface...

X-Recon - A Utility For Detecting Webpage Inputs And Conducting XSS Scans

A utility for identifying web page inputs and conducting XSS scanning. Features: Subdomain Discovery: Retrieves relevant subdomains for the target website and consolidates them into a whitelist. These subdomains can be utilized during the scraping process. Site-wide Link Discovery: Collects all...

RHEL 7 : bash (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bash: when effective UID is not equal to its real UID the saved UID is not dropped CVE-2019-18276 - A...

RHEL 4 : samba (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - samba: insecure wide links default CVE-2010-0926 Note that Nessus has not tested for this issue but has instead...

The vulnerability of microprogramming software in VMware SD-WAN Edge devices, related to authentication procedures that allow attackers to access the BIOS configuration.

The vulnerability of microprogramming software in VMware SD-WAN Edge devices related to authentication procedures’ deficiencies. Exploiting this vulnerability could allow attackers to access the BIOS configuration...

Mercusys MW325R 安全漏洞

The Mercusys MW325R is an enhanced wireless router from Mercusys of China. A security vulnerability exists in the Mercusys MW325R V31.11.0 221019 version, which stems from the fact that no authentication will be performed on data sent by the user, and a WAN attacker can make the management...

CLSA-2024-1716917767 unzip: Fix of CVE-2022-0530

CVE-2022-0530: possible flaw occurance during the conversion of a wide string to a local string...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a kernel module error and causes a system-wide rendering freeze...

Intel VTUNE Profiler Advisory - Lenovo Support US

No description provided...

MediaTek Tablet Vulnerability - Lenovo Support US

No description provided...

Synaptics Fingerprint Driver Vulnerability - Lenovo Support US

No description provided...

Intel Chipset Device Software Advisory - Lenovo Support US

No description provided...

Intel ProSet Wireless WiFi and Bluetooth Advisory - Lenovo Support US

No description provided...

Intel CST Software Advisory - Lenovo Support US

No description provided...

Intel Ethernet Adapters and Intel Ethernet Controller I225 Advisory - Lenovo Support US

No description provided...

Intel DTT Software Installer Advisory - Lenovo Support US

No description provided...

SUSE-SU-2024:1556-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2024-0450: Fixed 'quoted-overlap' issue inside the zipfile module bsc1221854. - CVE-2023-6597: Fixed removing tempfile.TemporaryDirectory in some edge cases related to symlinks bsc1219666. - CVE-2023-52425: Fixed denial of service resour...

CVE-2024-33398

There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster...