CBL Mariner 2.0 Security Update: mysql (CVE-2024-21236)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21236 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21157)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21157 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

Fedora 40 : suricata (2024-8b08786765)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8b08786765 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21142)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21142 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported...

Photon OS 4.0: Linux PHSA-2024-4.0-0703

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0703. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens SIMATIC S7-1500 CPUs Authentication Bypass Using an Alternate Path or Channel (CVE-2024-46887)

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum...

Google Chrome < 130.0.6723.70 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.70. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop22 advisory. - Inappropriate implementation in Extensions. CVE-2024-10229 - Type Confusio...

Siemens SIMATIC S7-1500 and S7-1200 CPUs URL Redirection to Untrusted Site (CVE-2024-46886)

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted...

RHEL 6 : odh-operator-container (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - http-proxy-middleware: Denial of Service CVE-2024-21536 Note that Nessus has not tested for this issue but has...

October 22, 2024—KB5045594 (OS Build 19045.5073) Preview

None None...

SUSE SLED15: apache2 / apache2-devel / apache2-event / apache2-manual / etc (SUSE-SU-2024:3742-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3742-1 advisory. - CVE-2024-40725: Fixed source code disclosure of local content bsc1228097 Tenable has extracted the...

Adobe Digital Editions < 4.5.3 Multiple Vulnerabilities (APSB16-45) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-45 advisory. - Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could...

Adobe Digital Editions < 3.0 (APSB14-03) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 3.0. It is, therefore, affected by a vulnerability as referenced in the APSB14-03 advisory. - Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption...

Adobe Creative Cloud < 4.0.0.185 Multiple Vulnerabilities (APSB17-13)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.0.0.185. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-13 advisory. - Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource...

Adobe After Effects < 16.1.2 (APSB19-31) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 16.1.2. It is, therefore, affected by a vulnerability as referenced in the APSB19-31 advisory. - Adobe After Effects versions 16 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Slackware Linux 15.0 openssl Vulnerability (SSA:2024-295-01)

The version of openssl installed on the remote host is prior to 1.1.1zb. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-295-01 advisory. New openssl packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding description bloc...

Mura/Masa CMS SQL Injection

Mura and Masa CMS Open-source fork suffer from a SQL injection vulnerability on the JSON API. By crafting a specific HTTP request, a remote and unauthenticated attacker can exploit the vulnerability to gain access to the database and perform arbitrary operations. No source data...

Dolibarr 16.x < 16.0.5 Database Download

Dolibarr versions 16.x 16.0.5 suffer from an improper access control vulnerability, allowing a remote and unauthenticated attacker to access the target instance contact database, including public and private notes. No source data...

Gradio < 4.37.1 Open Redirect

Gradio before version 4.37.1 suffer from an open redirect vulnerability, allowing an attacker to craft a link and try redirecting target applications users to a malicious server. This detection is included in the AI and LLM category. No source data...

Adobe Bridge 6.x < 6.1.1 Multiple Vulnerabilities (APSB15-13)

The version of Adobe Bridge installed on the remote Windows host is prior to 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb15-13 advisory. - Heap-based buffer overflow in Adobe Photoshop CC before 16.0 aka 2015.0.0 and Adobe Bridge CC before 6.11 allows...