Cisco Smart Software Manager On-Prem Web Interface Detection

Binary data ciscosmartsoftwaremanagerwebinterfacedetect.nbin...

Progress WhatsUp Gold Detection

Binary data progresswhatsupgolddetect.nbin...

Oracle Linux 7 : linux-firmware (ELSA-2024-12579)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12579 advisory. 20240715-999.34.git4c8fb21e.el7 - Rebase to latest upstream Orabug: 36826157 Tenable has extracted the preceding description block directly from the Oracle Lin...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-38583)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38583 advisory. - In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for...

Progress WhatsUp Gold File Upload RCE (CVE-2024-4884)

Binary data progresswhatsupgoldcve-2024-4884.nbin...

GLSA-202408-16 : re2c: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202408-16 re2c: Denial of Service Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not test...

Oracle Linux 8 : linux-firmware (ELSA-2024-12580)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12580 advisory. 20240715-999.34.git4c8fb21e.el8 - Rebase to latest upstream Orabug: 36826157 Tenable has extracted the preceding description block directly from the Oracle Lin...

Mattermost Server 9.0.x < 9.9.1 / 9.10.0 / 9.5.x < 9.5.7 (MMSA-2024-00356)

The version of Mattermost Server installed on the remote host is prior to 9.5.7 or 9.9.1 / 9.10.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00356 advisory. - Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6 fail to properly validate synced reactions, when share...

GLSA-202408-17 : Nautilus: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202408-17 Nautilus: Denial of Service Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not...

GLSA-202408-19 : ncurses: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-19 ncurses: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Security Updates for Microsoft SQL Server OLE DB Driver (July 2024)

The Microsoft SQL Server OLE DB Driver installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. An attacker could exploit the vulnerability by tricking an authenticated user UI:R into attempting to connect to a malicious SQL...

Oracle Linux 9 : linux-firmware (ELSA-2024-12578)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12578 advisory. 20240715-999.34.git4c8fb21e.el9 - Rebase to latest upstream Orabug: 36826157 Tenable has extracted the preceding description block directly from the Oracle Lin...

Cisco Identity Services Engine Stored XSS Vulnerabilities (cisco-sa-ise-xss-V2bm9JCY)

According to its self-reported version, Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities is affected by multiple vulnerabilities. - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 29, 2024 to August 4, 2024)

Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $10,400, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Wordpress

CVE-2022-3590 WordPress Vulnerability Scanner This Python scr...

Exploit for Incorrect Authorization in Apache Ofbiz

CVE-2024-38856 For Ethical Usage only, Any harmful or malicio...

Photon OS 5.0: Nss PHSA-2024-5.0-0342

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0342. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20517...

RHEL 8 : Red Hat OpenStack Platform 16.1.9 (openstack-nova) (RHSA-2024:5113)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5113 advisory. OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines,creating a redundant and...

Photon OS 3.0: Linux PHSA-2024-3.0-0772

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0772. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Nss PHSA-2024-4.0-0665

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0665. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20517...