A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0290-1 advisory.

    Update to v3.1.7:

     - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload     (bsc#1219465).
     - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of     service (bsc#1255435).
     - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0     (bsc#1210054).
     - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
     - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0280-1 advisory.

    Update to v3.1.7:

     - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload     (bsc#1219465).
     - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of     service (bsc#1255435).
     - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0     (bsc#1210054).
     - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
     - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3710-1 advisory.

  - A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0.
    This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql     injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public     and may be used. The identifier VDB-231021 was assigned to this vulnerability. (CVE-2023-3152)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
296678	SUSE SLES15 / openSUSE 15 Security Update : openvswitch3 (SUSE-SU-2026:0290-1)	Nessus	SuSE Local Security Checks	high
296468	SUSE SLES15 / openSUSE 15 Security Update : openvswitch (SUSE-SU-2026:0280-1)	Nessus	SuSE Local Security Checks	high
181748	SUSE SLES15 / openSUSE 15 Security Update : openvswitch3 (SUSE-SU-2023:3710-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2023-3152

high

Tenable Plugins

high

high

high