917 matches found
RHEL 8 : thunderbird (RHSA-2024:1496)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1496 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss:...
CVE-2024-29944 vulnerabilities
Vulnerabilities for packages: firefox-esr...
CVE-2024-29131 vulnerabilities
Vulnerabilities for packages: tez, trino, cassandra-reaper, druid, celeborn...
Fedora 39 : opensc (2024-6460a03e29)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6460a03e29 advisory. New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454 Tenable has extracted the preceding description block directly from the...
Fedora 39 : edk2 (2024-a9dead34c5)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9dead34c5 advisory. update to edk2-stable202402 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
GHSA-C5Q2-7R4C-MV6G vulnerabilities
Vulnerabilities for packages: melange, policy-controller, gomplate, slsa-verifier, temporal, dgraph, ko, dex, kubernetes-dashboard, step-ca, falcoctl, weaviate, spire-server, step, tekton-chains, rekor, terragrunt, zarf, kubescape, skopeo, timestamp-authority, tkn, kargo, flux-source-controller,...
Fedora 39 : chromium (2024-9ce64d8940)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9ce64d8940 advisory. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 Tenable has extracted the...
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: temporal-ui-server, k8sgpt, envoy-ratelimit-fips, bazelisk, kubernetes-dashboard-fips, nri-prometheus, chainctl, timoni, terraform-docs, temporal-server, secrets-store-csi-driver-provider-gcp, minio, kube-bench, prometheus-pushgateway, protoc-gen-go-grpc,...
CVE-2024-27101 vulnerabilities
Vulnerabilities for packages: spicedb...
CentOS 9 : python3.11-3.11.5-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.11-3.11.5-1.el9 build changelog. - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily...
CentOS 9 : toolbox-0.0.99.3-7.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the toolbox-0.0.99.3-7.el9 build changelog. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP...
CentOS 9 : samba-4.18.5-100.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the samba-4.18.5-100.el9 build changelog. - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing NTLM...
CentOS 9 : libguestfs-winsupport-9.2-1.el9
The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the libguestfs-winsupport-9.2-1.el9 build changelog. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is...
CentOS 9 : ruby-3.0.2-155.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ruby-3.0.2-155.el9 build changelog. - Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, whic...
Fedora 38 : moodle (2024-d2f180202f)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2f180202f advisory. Fix for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
RHEL 9 : firefox (RHSA-2024:0968)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0968 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Fedora 38 : mbedtls (2024-c7f1c839ac)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c7f1c839ac advisory. - Update to 2.28.7 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.7 Security Advisories:...
Ubuntu 20.04 LTS : UltraJSON vulnerabilities (USN-6629-3)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6629-3 advisory. USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Tenable has extracted the preceding...