PT-2023-27914 · Gofiber · Gofiber

Name of the Vulnerable Software and Affected Versions: gofiber versions prior to 2.49.2 Description: The issue impacts users who rely on the ctx.IsFromLocal method to restrict access to localhost requests. If exploited, it could allow unauthorized access to resources intended only for localhost...

Debian DSA-5445-1 : gst-plugins-good1.0 - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5445 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The...

PT-2023-20628

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue arises from the code not recognizing IPv4-mapped IPv6 addresses as "local", leading to a connection attempt. This could be exploited by attackers with user account access to bypass...

Malicious code in uhclabs_local_check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9e7f16a1e536eec45bfb40545edcf233dcaffbfc04e562d6e95a83f59f58a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Potential Exposure to BPFDoor (Local Check - Linux)

Binary data bpfdoorlocaldetect.nbin...

Photon OS 1.0: Openvswitch PHSA-2021-1.0-0381

An update of the openvswitch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0381. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 28 : dokuwiki (2018-be9f4838dd)

Update to upstream version 2018-04-22a Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

Solaris 10 (sparc) : 147673-10

SunOS 5.10: Oracle Java Web Console 3.1 Pa. Date this patch was last updated by Sun : Mar/14/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CentOS 6 : kernel (CESA-2018:0169)

The remote CentOS host is missing a security update. C Tenable Network Security, Inc. The package checks in this plugin were extracted from CentOS Errata and Security Advisory 2018:0169. include"compat.inc"; if description scriptid106535; scriptversion"3.3"; scriptcvsdate"Date: 2019/10/02...

Ubuntu 17.04 : curl vulnerability (USN-3262-1)

It was discovered that curl incorrectly handled client certificates when resuming a TLS session. A remote attacker could use this to hijack a previously authenticated connection. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

F5 Networks BIG-IP : BIG-IP Analytics generates predictable session cookies (SOL14334)

The BIG-IP Analytics system generates predictable session cookies. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL14334. The text description of this plugin is C F5 Networks. include"compat.inc"; if...

[SECURITY] Fedora 20 Update: chkrootkit-0.49-9.fc20

chkrootkit is a tool to locally check for signs of a rootkit. It contains: chkrootkit: shell script that checks system binaries for rootkit modification. ifpromisc: checks if the network interface is in promiscuous mode. chklastlog: checks for lastlog deletions. chkwtmp: checks for wtmp deletions...

AIX 610006 : U836413

The remote host is missing AIX PTF U836413 which is related to the security of the package devices.usbif.03000008.rte.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 710000 : U833162

The remote host is missing AIX PTF U833162 which is related to the security of the package devices.pci.77101223.com.7.1.0.15 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610005 : U841361

The remote host is missing AIX PTF U841361 which is related to the security of the package devices.pci.14103302.X11.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

MDVA-2009:174 : aria2

This update fixes an issue with aria2: - the default path aria2c uses to look for certificates for public CAs isn't the right one on mandriva systems %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

AIX 610002 : U834052

The remote host is missing AIX PTF U834052 which is related to the security of the package devices.common.IBM.son.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 530007 : U829601

The remote host is missing AIX PTF U829601 which is related to the security of the package devices.fcp.disk.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Solaris 5.4 (sparc) : 108193-02

CDE 1.0.1: dtprintinfo patch. Date this patch was last updated by Sun : Aug/09/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

MDVA-2009:016 : at

The 'at' command scheduler in Mandriva Linux 2009 failed to work at all for users other than root, due to a permission error. This update fixes the issue, making it possible for regular users to run at jobs. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch ...