Security Updates for Microsoft SharePoint Server 2019 (May 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability. CVE-2023-24950 - A...

CISA Known Exploited Vulnerability Catalog March 2023

For a detailed CISAs KEV Catalog, download the pdf file here Summary For a detailed CISAs KEV Catalog, download the pdf file here The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. To be included ...

Security Updates for Outlook (March 2023)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Launching Qualys Cloud Threat Database

We are proud to announce the release of the Qualys Cloud Threat Database which correlates more than 25 different threat intelligence feeds into a single source for all Qualys products to leverage. This comprehensive vulnerability and threat intelligence database pulls from trusted sources such as...

Atlassian Confluence Command Injection (CONFSERVER-79016)

According to its self-reported version number, the Atlassian Confluence running on the remote host is affected by a command injection vulnerability. A remote, unauthenticated attacker can use this to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied onl...

Apache Solr 7.4.0 <= 7.7.3 / 8.0.0 <= 8.11.0 RCE

The version of Apache Solr running on the remote host is at least 7.4.0 through 7.7.3 or 8.0.0 through 8.11.0. It is, therefore, affected by a remote code execution vulnerability due to using a bundled version of the Apache Log4J library vulnerable to RCE. For full impact and additional detail...

Google Chrome < 108.0.5359.94 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.94. It is, therefore, affected by a vulnerability as referenced in the 202212stable-channel-update-for-desktop advisory. - Type Confusion in V8. CVE-2022-4262 Note that Nessus has not tested for this issue bu...

Google Chrome < 108.0.5359.94 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.94. It is, therefore, affected by a vulnerability as referenced in the 202212stable-channel-update-for-desktop advisory. - Type Confusion in V8. CVE-2022-4262 Note that Nessus has not tested for this issue but...

CISA Warns of Actively Exploited Critical Oracle Fusion Middleware Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical flaw impacting Oracle Fusion Middleware to its Known Exploited Vulnerabilities KEV Catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2021-35587, carries a CVSS score of 9.8 a...

Google Chrome < 107.0.5304.121 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.121. It is, therefore, affected by a vulnerability as referenced in the 202211stable-channel-update-for-desktop24 advisory. - Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a...

KB5019966: Windows 10 version 1809 / Windows Server 2019 Security Update (November 2022)

The remote Windows host is missing security update 5019966. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 - Windows Kerberos...

ManageEngine PAM360 < 5.5 Build 5510 RCE

The remote host is running a version of ManageEngine PAM360 prior to 5.5 Build 5510. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on the remote host. Note that Ness...

Microsoft Edge (Chromium) < 105.0.1343.27 Vulnerability

The version of Microsoft Edge installed on the remote Windows host is prior to 105.0.1343.27. It is, therefore, affected by a vulnerability as referenced in the September 2, 2022 advisory. - Insufficient data validation in Mojo. CVE-2022-3075 Note that Nessus has not tested for this issue but has...

Cisco IOS XR Software Health Check Open Port (cisco-sa-iosxr-redis-ABJyE5xK)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability in the health check RPM due to a port that is open by default. An unauthenticated, remote attacker can exploit this, by connecting to the Redis instance on the open port, in order to read and write information...

Grandstream Networks UCM6200 Series SQLi (SIP)

A SQL injection vulnerability exists in Grandstream UCM6200 Series devices. An unauthenticated, remote attacker can exploit this to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. Note that Nessus has not tested...

QNAP QTS / QuTS hero Command Injection (QSA-21-05)

The version of QNAP QTS or QuTS hero on the remote host is affected by a command injection vulnerability. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 8 : kernel-rt (RHSA-2022:0822)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0822 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Ubuntu 20.04 LTS : Redis vulnerability (USN-5316-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5316-1 advisory. Reginaldo Silva discovered that due to a packaging issue, a remote attacker with the ability to execute arbitrary Lua scripts could possibly escape the Lua sandbo...

Detect and prioritize CISA Known Exploited Vulnerabilities in the cloud with Wiz

For each CVE, the Wiz Research team maintains data from multiple threat intelligence sources and our own independent research. Now that we’ve added support for the new CISA KEV catalog, learn how you can use it in your cloud environment...

AlmaLinux 8 : polkit (ALSA-2021:2238)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:2238 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network...