Fedora 40 : iaito / radare2 (2024-a562addefa)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-a562addefa advisory. Bump to version 5.9.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

IBM DB2 DoS (7165338) (Unix)

According to its self-reported version number, IBM Db2 on Unix is vulnerable to a denial of service as the server may crash when using a specially crafted query on columnar tables in a database partitioned environment. Note that Nessus has not tested for this issue but has instead relied only on...

Siemens SCALANCE M-800, RUGGEDCOM RM1224 Insertion of Sensitive Information Into Log File (CVE-2024-41978)

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.1, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.1, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.1, SCALANCE M812-1 ADSL- Router family All versions V8.1, SCALANCE M816-1...

Ivanti Avalanche < 6.4.4 Multiple Vulnerabilities

The version of Ivanti Avalanche running on the remote host is prior to 6.4.4. It is, therefore, is affected by multiple vulnerabilities : - An off-by-one error in WLInfoRailService allows a remote unauthenticated attacker to crash the service. CVE-2024-36136 - Improper input validation in the...

F5 Networks BIG-IP : Apache HTTPD vulnerability (K000140784)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000140784 advisory. null pointer dereference in modproxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server v...

Fedora 39 : iaito / radare2 (2024-3667e29b88)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-3667e29b88 advisory. Bump to version 5.9.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

ManageEngine ServiceDesk Plus MSP < 14.8 Build 14810

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.8 Build 14810. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2024-41150 advisory. - An Stored Cross-site Scripting vulnerability in request module affects Zohocorp...

JetBrains TeamCity < 2024.07.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.07.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions CVE-2024-43114 - In JetBrains TeamCity before...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 12, 2024 to August 18, 2024)

Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 14th, researchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and ...

Ubuntu 14.04 LTS / 16.04 LTS : XStream vulnerabilities (USN-6978-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6978-1 advisory. It was discovered that XStream incorrectly handled parsing of certain crafted XML documents. A remote attacker could possibly use this issue ...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42224)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42224 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42223)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42223 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix...

Ubuntu 24.04 LTS : QEMU vulnerabilities (USN-6977-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6977-1 advisory. It was discovered that QEMU did not properly handle certain memory operations, which could result in a buffer overflow. An attacker could potentially use...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42152)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42152 advisory. - In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a possible leak when destroy ...

FreeBSD : chromium -- multiple security fixes (b339992e-6059-11ef-8a0f-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b339992e-6059-11ef-8a0f-a8a1599412c6 advisory. Chrome Releases reports: This update includes 38 security fixes: Tenable has extracted the...

Intel Connectivity Performance Suite Installed (Windows)

Binary data intelconnectivityperformancesuitewininstalled.nbin...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-41007)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41007 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets I...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42247)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42247 advisory. - In the Linux kernel, the following vulnerability has been resolved: wireguard: allowedips: avoid unaligned...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42229)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42229 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer...

RHEL 8 / 9 : OpenShift Container Platform 4.15.28 (RHSA-2024:5442)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5442 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...