RHEL 7 : rh-nodejs12-nodejs (RHSA-2020:0602)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0602 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

RHEL 7 : rh-python38 (RHSA-2020:4299)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4299 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Auth0 JsonWebToken Library Installed (Windows)

Binary data auth0jsonwebtokenwininstalled.nbin...

Auth0 jsonwebtoken Library Installed (Linux/UNIX)

Binary data auth0jsonwebtokennixinstalled.nbin...

CVE-2023-0210

A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems...

VMware Cloud Foundation Installed (Unix)

Binary data vmwarecloudfoundationinstalled.nbin...

SUSE SLES15 Security Update : ca-certificates-mozilla (SUSE-SU-2023:0003-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0003-1 advisory. - Updated to 2.60 state of Mozilla SSL root CAs bsc1206622 Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate...

Linux SMB3 Kernel Server (KSMBD) Installed (Linux)

Binary data linuxsmb3kernelserverksmbdlinuxinstalled.nbin...

Fedora 36 : firefox (2022-2321894a60)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2321894a60 advisory. - New upstream version 107.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

CVE-2022-20559

In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User...

CVE-2022-20531

In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Information disclosure

In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

HP Jumpstart 安全漏洞

HP Jumpstart is a multi-stage pre-installed welcome program from Hewlett-Packard HP USA for various HP products. A security vulnerability exists in HP Jumpstart. An attacker could exploit the vulnerability to escalate privileges...

OpenSSL Installed (Linux)

Binary data opensslnixinstalled.nbin...

Microsoft Azure Command-Line Interface (CLI) Installed (Windows)

Binary data microsoftazurecliinstalledwin.nbin...

Ubuntu 16.04 ESM : SQLite vulnerability (USN-5712-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5712-1 advisory. It was discovered that SQLite did not properly handle large string inputs in certain circumstances. An attacker could possibly use this issue to cause a denial of...

CVE-2022-2741

The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node this can easily be guessed based on CAN traffic analyses. The frame must contain th...

October 4, 2022, update for Office 2016 (KB5002243)

None None...

Oracle Linux 7 : squid (ELSA-2022-22254)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-22254 advisory. - 7:4.11-3.0.1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

PT-2022-6338 · Unknown · Mklogic-500

Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to the presence of pre-installed credentials. Exploitation of this issue may allow a remote attacker to access the contents of the FTP server. Recommendations: At t...