60136 matches found
Oracle Linux 7 : krb5 (ELSA-2024-5076)
"The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5076 advisory. - Fix integer overflows in PAC parsing CVE-2022-42898 - Fix KDC null deref on TGS inner body null server CVE-2021-37750 - Fix flaws in LDAP DN checkin...
Mozilla Firefox ESR < 115.16
The version of Firefox ESR installed on the remote Windows host is prior to 115.16. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-48 advisory. - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the...
Synology DSM HTTP/2 Implementations Window Size and Stream Prioritization Manipulation (CVE-2019-9511)
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...
F5 Networks BIG-IP : Perl vulnerability (K000141301)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000141301 advisory. Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute...
JetBrains YouTrack Installed (Linux / Unix)
Binary data jetbrainsyoutracknixinstalled.nbin...
FreeBSD : chromium -- multiple security fixes (2f82696c-adad-447b-9938-c99441805fa3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2f82696c-adad-447b-9938-c99441805fa3 advisory. Chrome Releases reports: This update includes 5 security fixes: Tenable has extracted the...
Ubuntu 18.04 LTS : CUPS vulnerability (USN-7041-2)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7041-2 advisory. USN-7041-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the preceding description bloc...
Mozilla Firefox ESR < 115.16
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.16. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-48 advisory. - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the...
AlmaLinux 8 : grafana (ALSA-2024:7349)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:7349 advisory. net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 Tenable has extracted the preceding description block directly from th...
iTerm2 Installed (macOS)
Binary data iterm2macosinstalled.nbin...
Adobe Commerce / Magento Installed (Linux)
Binary data adobecommercenixinstalled.nbin...
Rocky Linux 9 : pcp (RLSA-2024:6848)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6848 advisory. pcp: pmpost symlink attack allows escalating pcp to root user CVE-2024-45770 pcp: pmcd heap corruption through metric pmstore operations CVE-2024-45769...
Oracle Linux 7 : kernel (ELSA-2024-6994)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6994 advisory. 3.10.0-1160.119.1.0.5.el7.OL7 - wifi: mac80211: Avoid address calculations via out of bounds array indexing Kees Cook Orabug: 37092983 Tenable has extracted the...
Rocky Linux 9 : libnbd (RLSA-2024:6757)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:6757 advisory. libnbd: NBD server improper certificate validation CVE-2024-7383 Tenable has extracted the preceding description block directly from the Rocky Linux security...
CentOS 9 : microcode_ctl-20240910-1.el9
The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20240910-1.el9 build changelog. - Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information...
Rocky Linux 9 : osbuild-composer (RLSA-2024:7204)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:7204 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenabl...
Rocky Linux 8 : go-toolset:rhel8 (RLSA-2024:6908)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6908 advisory. net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 go/parser: golang: Calling any of the Parse functions...
Rocky Linux 8 : gtk3 (RLSA-2024:6963)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:6963 advisory. gtk3: gtk2: Library injection from CWD CVE-2024-6655 Tenable has extracted the preceding description block directly from the Rocky Linux security advisory. Note...
Rocky Linux 9 : openssl (RLSA-2024:6783)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:6783 advisory. openssl: Possible denial of service in X.509 name checks CVE-2024-6119 Tenable has extracted the preceding description block directly from the Rocky Linux securi...
