Azure Linux 3.0 Security Update: kernel (CVE-2024-56781)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56781 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/prominit: Fixup missing powermac...

Fedora 40 : radare2 (2025-f8eca89d63)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f8eca89d63 advisory. fix CVE-2024-56737, CVE-2025-56737, CVE-2025-1864 ---- Fix CVE-2025-1744 and CVE-2025-1864 Tenable has extracted the preceding description block...

Azure Linux 3.0 Security Update: libxml2 (CVE-2025-27113)

The version of libxml2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27113 advisory. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56626)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56626 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in...

Azure Linux 3.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26594)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26594 advisory. - A use-after-free flaw was found in X.Org and Xwayland. The root cursor i...

CBL Mariner 2.0 Security Update: clang16 / llvm16 (CVE-2023-29933)

The version of clang16 / llvm16 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29933 advisory. - llvm-project commit bd456297 was discovered to contain a segmentation fault via the component...

ISLOnline ISL Light Client Installed (Linux)

Binary data islonlineisllightclientnixinstalled.nbin...

RockyLinux 9 : keepalived (RLSA-2025:0917)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0917 advisory. keepalived: Integer overflow vulnerability in vrrpipsetshandler CVE-2024-41184 Tenable has extracted the preceding description block directly from the RockyLinux...

Schneider Electric End-of-Life Devices Detection

The current plugin identifies Schneider devices that are end-of-life, i.e., still supported but have a discontinued date announced. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and...

RockyLinux 9 : perl-App-cpanminus (RLSA-2024:10218)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:10218 advisory. perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 Tenable has extracted the preceding description block...

RockyLinux 9 : doxygen (RLSA-2025:1329)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1329 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...

RockyLinux 9 : gcc (RLSA-2025:1346)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1346 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...

RockyLinux 9 : edk2:20240524 (RLSA-2024:11219)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:11219 advisory. edk2: Integer overflows in PeCoffLoaderRelocateImage CVE-2024-38796 Tenable has extracted the preceding description block directly from the RockyLinux security...

SolarWinds Web Help Desk < 12.8.5 Information Disclosure

The version of Solarwinds Web Help Desk installed on the remote host is prior to 12.8.5. It is, therefore, affected by a vulnerability. SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software. Note that...

Schneider Electric Discontinued Devices Detection

The current plugin identifies Schneider devices that are currently discontinued. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until...

RockyLinux 9 : raptor2 (RLSA-2025:0312)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0312 advisory. raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 Tenable has extracted the preceding description block directly from the...

Schneider Electric Active Devices Detection

The current plugin identifies Schneider devices that are still under active support. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable...

RockyLinux 9 : postfix (RLSA-2024:9243)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9243 advisory. postfix: SMTP smuggling vulnerability CVE-2023-51764 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note th...

AIX : Multiple Vulnerabilities (IJ53757) (deprecated)

The vendor has closed the APAR as a program error. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/12. Advisory states "Closed as program error" and "Removed security issue." include'compat.inc'; if description scriptid232951; scriptversion"1.5";...

RockyLinux 9 : cyrus-imapd (RLSA-2024:9195)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9195 advisory. cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command CVE-2024-34055 Tenable has extracted the preceding description block directl...