CVE-2024-3838 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-21049 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: tkn-fips, spire-server, skaffold, tekton-chains-fips, vexctl, flux-source-controller, gitsign, ko-fips, policy-controller-fips, melange, wolfictl, tkn, falcoctl, falcoctl-fips, tekton-chains, zarf, kubescape, chainctl, aactl, zot, goreleaser, ko, spire-server-fips,...

GHSA-J5VM-7QCC-2WWG vulnerabilities

Vulnerabilities for packages: kots...

GHSA-RHH4-RH7C-7R5V vulnerabilities

Vulnerabilities for packages: mattermost-fips, zarf, kubescape, chainctl, nuclei, wolfictl, terragrunt, kots, k9s, filebrowser, vault, gotenberg...

CVE-2024-2466 vulnerabilities

Vulnerabilities for packages: curl...

RHEL 8 : thunderbird (RHSA-2024:1496)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1496 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss:...

CVE-2024-29944 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: trino, celeborn, druid, tez, cassandra-reaper...

Fedora 39 : opensc (2024-6460a03e29)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6460a03e29 advisory. New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454 Tenable has extracted the preceding description block directly from the...

Fedora 39 : edk2 (2024-a9dead34c5)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9dead34c5 advisory. update to edk2-stable202402 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: kots, sops, slsa-verifier, bank-vaults, melange, minio, skopeo, temporal-ui-server, guac, argo-workflows, sigstore-scaffolding, ko, kubescape, spire-server, step-ca, terragrunt, gomplate, step, gitsign, kubernetes-dashboard, tkn, zot, apko, oauth2-proxy, frp, kargo,...

Fedora 39 : chromium (2024-9ce64d8940)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9ce64d8940 advisory. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 Tenable has extracted the...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: trillian, sbomqs, docker-credential-gcr, pulumi-kubernetes-operator, minio, dynamic-localpv-provisioner-fips, wireguard-go, kustomize, http-echo, nri-mysql, kube-logging-logging-operator, aws-ebs-csi-driver, kubernetes-dashboard-metrics-scraper,...

CVE-2024-27101 vulnerabilities

Vulnerabilities for packages: spicedb...

CentOS 9 : python3.11-3.11.5-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.11-3.11.5-1.el9 build changelog. - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily...

CentOS 9 : toolbox-0.0.99.3-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the toolbox-0.0.99.3-7.el9 build changelog. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP...

CentOS 9 : libguestfs-winsupport-9.2-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the libguestfs-winsupport-9.2-1.el9 build changelog. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is...

CentOS 9 : samba-4.18.5-100.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the samba-4.18.5-100.el9 build changelog. - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing NTLM...

CentOS 9 : ruby-3.0.2-155.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ruby-3.0.2-155.el9 build changelog. - Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, whic...