F5 Networks BIG-IP : BIG-IP ASM WebSocket vulnerability (K88230177)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.6 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K88230177 advisory. - On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x...

F5 Networks BIG-IP : BIG-IP FPS XSS vulnerability (K63497634)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.5 / 14.1.2.8 / 15.1.1 / 16.0.1. It is, therefore, affected by a vulnerability as referenced in the K63497634 advisory. - On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2....

Fedora 33 : mingw-jasper (2021-8ecb3686ca)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-8ecb3686ca advisory. - jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of...

Python End of Life (EOL) Detection - Linux

The Python version on the remote host has reached the end of life EOL and should not be used anymore. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2021-1189)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for compat-poppler022 (EulerOS-SA-2021-1185)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : bluez (EulerOS-SA-2021-1179)

According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BlueZ 5.42, a use-after-free was identified in 'confopt' function in 'tools/parser/l2cap.c' source file. This issue can be triggered by...

EulerOS 2.0 SP5 : subversion (EulerOS-SA-2021-1235)

According to the version of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed...

EulerOS 2.0 SP5 : librsvg2 (EulerOS-SA-2021-1205)

According to the version of the librsvg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because...

EulerOS 2.0 SP5 : spice (EulerOS-SA-2021-1232)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...

Ubuntu: Security Advisory (USN-4715-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2021-1151)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : java-11-openjdk (CESA-2020:1514)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1514 advisory. - OpenJDK: Misplaced regular expression syntax error check in RegExpScanner Scripting, 8223898 CVE-2020-2754 - OpenJDK: Incorrect handling of empty...

Fedora 33 : libebml (2021-e84e1aaa2c)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-e84e1aaa2c advisory. - Fixes heap use-after-free when parsing malformed file upstream issue 2989. FEDORA-2021-e84e1aaa2c Note that Nessus has not tested for this issue but has...

CentOS 8 : wavpack (CESA-2020:1581)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1581 advisory. - wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 - wawpack: Out-of-bounds read in WavpackVerifySingleBlock function lead...

Fedora 33 : thunderbird (2021-67a539137d)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-67a539137d advisory. - Update to latest upstream version. FEDORA-2021-67a539137d Note that Nessus has not tested for this issue but has instead relied only on the application's...

EulerOS 2.0 SP8 : php (EulerOS-SA-2021-1163)

According to the version of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - FILTERVALIDATEURL accepts URLs with invalid userinfoCVE-2020-7071 Note that Tenable Network Security has extracted the preceding description block...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2020:4676)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4676 advisory. - QEMU: Slirp: use-after-free during packet reassembly CVE-2019-15890 - libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent...

CentOS 8 : freerdp and vinagre (CESA-2020:4647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4647 advisory. - freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 - freerdp: Out of bound read in updaterecv could result in a crash...

CentOS 8 : mysql:8.0 (CESA-2020:3732)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3732 advisory. - mysql: Information Schema unspecified vulnerability CPU Oct 2019 CVE-2019-2911 - mysql: Server: Security: Encryption unspecified vulnerability CPU Oc...