60138 matches found
Ubuntu 24.04 LTS : Python vulnerability (USN-6941-1)
The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6941-1 advisory. It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered private or globally reachable. Th...
LOLDriver Detection (Windows)
Binary data loldriversdetectwin.nbin...
Microsoft Edge (Chromium) < 127.0.2651.86 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 1, 2024 advisory. - Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attack...
Danswer Unauthenticated Access
By default, Danswer does not require authentication to access the application. This allows an attacker to perform arbitrary modifications on experiments or models in the web interface. This detection is included in the AI and LLM category. No source data...
RHEL 7 : httpd (RHSA-2024:4943)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4943 advisory. For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...
System Asset Info Enumeration (Linux / Unix)
Binary data linuxassetinfoenum.nbin...
SUSE SLED15: gnome-extensions / gnome-shell / gnome-shell-calendar / etc (SUSE-SU-2024:2618-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2618-1 advisory. - CVE-2024-36472: Fixed portal helper automatically launched without user confirmation bsc1225567 Tenable...
Fedora 39 : xdg-desktop-portal-hyprland (2024-295a735fbc)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-295a735fbc advisory. Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3 Tenable has extracted the preceding description block directly from...
Fedora 40 : chromium (2024-141c438daf)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-141c438daf advisory. - fix crash on ppc64le Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Google Chrome < 127.0.6533.88 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 127.0.6533.88. It is, therefore, affected by multiple vulnerabilities as referenced in the 202407stable-channel-update-for-desktop30 advisory. - Insufficient data validation in Dawn in Google Chrome on Android prior to...
Fedora 40 : curl (2024-a7976ba89f)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a7976ba89f advisory. - fix freeing stack buffer in utf8asn1str CVE-2024-6197 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Photon OS 5.0: Mysql PHSA-2024-5.0-0335
An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0335. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Python3 PHSA-2024-5.0-0334
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0334. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
OSGeo GeoServer Service Detection
Binary data osgeogeoserverservicedetect.nbin...
External Broken Resources Detected
Web applications heavily rely on external resources such as JavaScript files, Cascading Style Sheets CSS or images. When an application uses links which targets external resources which do not exist, an attacker could try gaining control over this resource to inject code in the target web...
PaperCut NG/MF < 22.1.3 Path Traversal
PaperCut NG and PaperCut MF versions prior to 22.1.3 on Windows is vulnerable to a path traversal allowing an unauthenticated attacker to read, write or delete arbitrary files and may also leads to remote code execution when external device integration is enabled. No source data...
AnythingLLM API Sensitive Information Disclosure
AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...
Danswer Detected
This is an informational plugin to inform the user that the scanner has detected a publicly accessible Danswer instance on the target application. Danswer is the AI Assistant connected to your company's docs, apps, and people. This detection is included in the AI and LLM category. No source data...
Facade Ignition < 2.5.2 Remote Code Execution
Facade Ignition is a customizable error page for Laravel applications running on Laravel 5.5 up to Laravel 8. It is the default error page for all Laravel 6 applications. Facade Ignition versions prior to 2.5.2 is is affected by a vulnerability allowing an unauthenticated attacker to obtain Remot...