Fedora 38 : dotnet7.0 (2023-484d7950a9)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-484d7950a9 advisory. This is the November 2023 monthly update for .NET 7. It includes several security fixes. Release Notes:...

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure ICS appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated executio...

Golang Go Programming Language Installed (macOS)

Binary data golangmacosinstalled.nbin...

CVE-2023-40446

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing maliciously crafted input may lead to arbitrary code execution in user-installed apps...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to cause service interruptions.

The vulnerability of the ACEManager component in the ALEOS operating system for wireless routers from Sierra Wireless—such as the MP70, RV50x, RV55, LX40, LX60 ES450, and GX450 models—is related to pre-installed credentials due to the use of the assert function or similar operators. Exploiting th...

Fedora 38 : python2.7 (2023-34a3a5adba)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-34a3a5adba advisory. Security fix for CVE-2022-48560 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

The vulnerability of the Fortinet FortiClient security tool for Windows lies in its use of pre-installed user accounts, which allows a hacker to circumvent security restrictions.

The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of pre-installed user accounts. Exploiting this vulnerability could allow a hacker to circumvent security restrictions...

Microsoft PowerShell Installed (macOS)

Binary data microsoftpowershellmacosinstalled.nbin...

RHEL 8 : firefox (RHSA-2023:7569)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7569 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Fedora 39 : thunderbird (2023-985a025a03)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-985a025a03 advisory. Update to 115.5.0 https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/ https://www.thunderbird.net/en-US/thunderbird/115.5.0/releasenotes/...

CVE-2023-6045

in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion...

Type confusion

in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion...

CVE-2023-6045 Arkruntime has a type confusion vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion...

CVE-2023-6045 Arkruntime has a type confusion vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion...

PT-2023-32490 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: The issue allows a local attacker to execute arbitrary code in pre-installed apps through type confusion. Recommendations: For OpenHarmony versions 3.2.2 and prior, at the moment, there is no...

Fedora 38 : golang (2023-96331e77a5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-96331e77a5 advisory. Includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and...

Fedora 38 : roundcubemail (2023-0fd9865145)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0fd9865145 advisory. Release 1.6.5 - Fix PHP8 fatal error when parsing a malformed BODYSTRUCTURE 9171 - Fix duplicated Inbox folder on IMAP servers that do not use Inbox...

Fedora 37 : xorg-x11-server (2023-f111d2f306)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f111d2f306 advisory. Security fix for CVE-2023-5367, CVE-2023-5380 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 39 : ansible-core (2023-389ed7a7e7)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-389ed7a7e7 advisory. Update to 2.16.0b2. Mitigates CVE-2023-5115. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Fedora 37 : chromium (2023-7f87c8b975)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7f87c8b975 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 Tenable has extracted the preceding description block directly from the Fedora security...