Debian DLA-3325-1 : openssl – LTS security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3325 advisory. - AES OCB mode for 32-bit x86 platforms using the AES-NI assemb ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Microsoft Print 3D app Remote Code Execution (February 2023)

The Microsoft Print 3D app installed on the remote Windows host may be affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only o ...

Continue Reading

CVSS3 - HIGH

Security Updates for Microsoft .NET Framework (February 2023)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A denial of service (DoS) vulnerabili ...

Continue Reading

CVSS3 - HIGH

Security Updates for Microsoft Office Online Server (February 2023)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An una ...

Continue Reading

CVSS3 - CRITICAL

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

## Summary Vulnerabilities in the IBM® Runtime Environment Java™ Technology Edition affect IBM SAN Volume Controller, IBM Storwize V7000, V5000, V3700 and V3500, IBM Spectrum Virtualize Softwa ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Apache SOAP contains unauthenticated RPCRouterServlet

** UNSUPPORTED WHEN ASSIGNED ** In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods on the cl ...

Continue Reading

CVSS3 - CRITICAL

Microsoft 3D Builder app Multiple Remote Code Execution Vulnerabilities (February 2023)

The version of the Microsoft 3D Builder app installed on the remote Windows host is prior to 20.0.3.0. It is, therefore, affected by multiple unspecified remote code execution vulnerabilities. Note th ...

Continue Reading

CVSS3 - HIGH

CVE-2022-3843

In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a lim ...

Continue Reading

CVSS3 - CRITICAL

Back to Main

Subscribe for the latest news: