Photon OS 3.0: Linux PHSA-2024-3.0-0772

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0772. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Tpm2 PHSA-2024-3.0-0776

An update of the tpm2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0776. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens RUGGEDCOM Incorrect Privilege Assignment (CVE-2024-38278)

The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system. This plugin only works with...

Fedora 39 : opentofu (2024-35147eb6ad)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-35147eb6ad advisory. Update to 1.8.0 ---- Fix for CVE-2024-6257 CVE-2024-6104 CVE-2024-24789 Tenable has extracted the preceding description block directly from the Fedo...

Siemens RUGGEDCOM Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2024-39675)

In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

ABB Ability System 800xA Improper Input Validation (CVE-2024-3036)

Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2. This plugin only works with Tenable.ot. Please...

EulerOS 2.0 SP11 : less (EulerOS-SA-2024-2084)

According to the versions of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation...

SUSE SLES15 Security Update : kernel (Live Patch 41 for SLE 15 SP3) (SUSE-SU-2024:2815-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2815-1 advisory. This update for the Linux Kernel 5.3.18-15030059150 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed...

SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2024:2816-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2816-1 advisory. - CVE-2024-42005: Fixed SQL injection in QuerySet.values and valueslist bsc1228629 - CVE-2024-41989: Fixed Memory exhaustion in...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2804-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2804-1 advisory. - Fixed not copying of skel files bsc1228770 Tenable has extracted the preceding description block direct...

Photon OS 4.0: Tpm2 PHSA-2024-4.0-0664

An update of the tpm2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0664. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS 2.0 SP11 : less (EulerOS-SA-2024-2101)

According to the versions of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation...

GLSA-202408-10 : nghttp2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-10 nghttp2: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in nghttp2. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Juniper Junos OS Vulnerability (JSA75756)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75756 advisory. - An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to access confidential information...

GLSA-202408-09 : Cairo: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-09 Cairo: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Cairo. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

GLSA-202408-13 : Nokogiri: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202408-13 Nokogiri: Denial of Service A denial of service vulnerability has been discovered in Nokogiri. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly...

Progress WhatsUp Gold < 23.1.3 Multiple Vulnerabilities (000258130)

The version of Progress WhatsUp Gold installed on the remote host is prior to 23.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 000258130 advisory, including: - In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress...

Sunhillo SureLine Web Portal Detection

Binary data sunhillosurelinewebdetect.nbin...

GLSA-202408-11 : aiohttp: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-11 aiohttp: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in aiohttp. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

GLSA-202408-12 : Bitcoin: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202408-12 Bitcoin: Denial of Service Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not...