CBL Mariner 2.0 Security Update: kernel (CVE-2024-50185)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50185 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruptio...

CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0134)

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0134 advisory. - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability whe...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50167)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50167 advisory. - In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50237)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50237 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vi...

Ubuntu 20.04 LTS : PHP regression (USN-7157-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7157-2 advisory. USN-7157-1 fixed vulnerabilities in PHP. The patch for CVE-2024-8932 caused a regression in php7.4. This update fixes the problem. Tenable has extracted the...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50188)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50188 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50282)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50282 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add missing size check in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50209)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50209 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Add a check for memory...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53059)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53059 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handlin...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50245)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50245 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix possible deadlock in mirea...

Rockwell Arena Installed (Windows)

Binary data rockwellarenawininstalled.nbin...

Cleo VLTrader Web Service Detection

Binary data cleovltraderdetect.nbin...

Cleo LexiCom Web Service Detection

Binary data cleolexicomdetect.nbin...

SUSE SLES15 / openSUSE 15 Security Update : postgresql13 (SUSE-SU-2024:4175-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4175-1 advisory. - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level...

Liferay Portal 7.0.0 < 7.4.3.102 XSS

The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, 7.2 GA through fix pack 20, 7.1 GA through fix pack 28, 7.0 GA through fix pack 102 and 6.2 GA through fix pack 173 does not sufficiently...

SUSE SLES15 / openSUSE 15 Security Update : python39 (SUSE-SU-2024:4135-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4135-1 advisory. - CVE-2024-11168: Improper validation of IPv6 and IPvFuture addresses bsc1233307. Bug fixes: - Remove -IVendor/ from...

vulnerability scanner

This is a Java-based web vulnerability scanner. The tool is classified as an offensive tool for web vulnerability scanning. The primary vulnerability being targeted is not explicitly stated, but based on the code and metadata, it appears to be a web application scanner that can perform SQL...

CVE-2024-28140

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and...

CVE-2024-28140

CVE-2024-28140 describes a vulnerability in the Image Access Scan2Net scanner software where the device boots into kiosk mode and opens the Scan2Net interface in a browser window that runs with root privileges, with several other applications also running as root. The issue is evidenced by proces...

CVE-2024-28140 Violation of Least Privilege Principle

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and...