Oracle Linux 8 : container-tools:ol8 (ELSA-2024-8038)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8038 advisory. aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins...

Ubuntu 14.04 LTS : nginx vulnerability (USN-7014-3)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7014-3 advisory. USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding update for Ubuntu 14.04 LTS. Tenable has extracted the preceding description blo...

WordPress Cookie Scanner Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Cookie Scanner Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49220 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 18da6e2fb5aa Credits SOPROBRO Required...

Palo Alto Cortex XDR Agent Installed (Linux)

Binary data paloaltocortexxdragentunixinstalled.nbin...

Amazon Linux 2023 : liboath, liboath-devel, libpskc (ALAS2023-2024-722)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-722 advisory. oath-toolkit: Local root exploit in a PAM module CVE-2024-47191 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-39472)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39472 advisory. - In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46798)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46798 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for sndsocpcmruntime...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-52889)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52889 advisory. - In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when...

CBL Mariner 2.0 Security Update: python-webob (CVE-2024-42353)

The version of python-webob installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42353 advisory. - WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42272)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42272 advisory. - In the Linux kernel, the following vulnerability has been resolved: sched: actct: take care of padding in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-43854)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43854 advisory. - In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to ze...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-43828)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43828 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46724)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46724 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds read of...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-43908)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43908 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer...

Slackware Linux 15.0 / current libarchive Vulnerability (SSA:2024-287-01)

The version of libarchive installed on the remote host is prior to 3.7.7. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-287-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44947)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44947 advisory. - In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page content...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46676)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46676 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44944)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44944 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper functio...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42280)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42280 advisory. - In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix a use after free in hfcmultit...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44934)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44934 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc...