60136 matches found
CBL Mariner 2.0 Security Update: kernel (CVE-2024-35982)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35982 advisory. - In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loop trying t...
CBL Mariner 2.0 Security Update: cmake / curl / mysql (CVE-2023-46219)
The version of cmake / curl / mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46219 advisory. - When saving HSTS data to an excessively long file name, curl could end up removing all content...
Oracle Linux 8 : postgresql:15 (ELSA-2024-6001)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6001 advisory. pgaudit pgrepack postgres-decoderbufs postgresql 15.8-1 - Update to 15.8 - Fix CVE-2024-7348 Tenable has extracted the preceding description block...
CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2024-26951)
The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26951 advisory. - In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 19, 2024 to August 25, 2024)
Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 14th, researchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and ...
ManageEngine Password Manager Pro < 12.4 Build 12431 SQLi
The remote host is running a version of ManageEngine Password Manager Pro prior to 12.4 Build 12431. It is, therefore, affected by a SQL injection vulnerability. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the...
FreeBSD : firefox -- multiple vulnerabilities (44de1b82-662d-11ef-a51b-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 44de1b82-662d-11ef-a51b-b42e991fc52e advisory. [email protected] reports: This update includes 3 CVEs: Tenable has extracted the preceding...
AlmaLinux 9 : postgresql:16 (ALSA-2024:5929)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:5929 advisory. postgresql: PostgreSQL pgstatsext and pgstatsextexprs lack authorization checks CVE-2024-4317 postgresql: PostgreSQL relation replacement during pgdump...
AlmaLinux 8 : postgresql:15 (ALSA-2024:6001)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6001 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 postgresql: PostgreSQL pgstatsext and pgstatsextexprs lack...
AlmaLinux 8 : postgresql:12 (ALSA-2024:6000)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6000 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly from...
AlmaLinux 8 : postgresql:13 (ALSA-2024:6018)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6018 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly from...
Magento XXE (CVE-2024-34102)
Binary data magentoXXECVE-2024-34102.nbin...
SUSE SLES15: kernel-livepatch-5_3_18-150200_24_191-default / etc (SUSE-SU-2024:3039-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3039-1 advisory. This update for the Linux Kernel 5.3.18-15020024191 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed...
Juniper Junos OS DoS (JSA82988)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82988 advisory. - A Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated,...
Google Chrome < 128.0.6613.114 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.114. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop28 advisory. - Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a...
ManageEngine ADAudit Plus < Build 8121 Multiple Vulnerabilities
The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8121. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option...
Google Chrome < 128.0.6613.113 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 128.0.6613.113. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop28 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allow...
Fedora 39 : dovecot (2024-ba5bb9f63a)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ba5bb9f63a advisory. - CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. - CVE-2024-23185: Abnormally large email headers are n...
SUSE SLES12 Security Update : kernel (Live Patch 48 for SLE 12 SP5) (SUSE-SU-2024:3021-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3021-1 advisory. This update for the Linux Kernel 4.12.14-122176 fixes one issue. The following security issue was fixed: - CVE-2021-47378: Fixed use-after-free by...