Security Updates for Microsoft Office Products (December 2024)

The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2024-43600, CVE-2024-49059 - A remote code execution vulnerability. An...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0016)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.92.3- memcgwriteeventcontrol: fix a user-triggerable oops Al Viro Orabug: 37070674 CVE-2024-45021- ocfs2: fix races between hole punching and AIO+DIO Su Yue Orabug: 36835819...

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security Updates for Microsoft SharePoint Server 2016 (December 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2024-49068 - A remote code execution vulnerability. CVE-2024-49065, CVE-2024-49070 - A Information...

Defense-in-Depth Security Updates for Microsoft Project (December 2024)

The Microsoft Project products are missing defense-in-depth security updates to help improve security-related features. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

OPENSUSE-SU-2024:14564-1 lxd-5.21.1-2.1 on GA media

These are all security issues fixed in the lxd-5.21.1-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 41 : chromium (2024-791faa660a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-791faa660a advisory. Update to 131.0.6778.108 High CVE-2024-12053: Type Confusion in V8 Tenable has extracted the preceding description block directly from the Fedora...

Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122201 fixes several issues. The following security issues were fixed: CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273. CVE-2024-35863: Fixed potential UA...

Photon OS 4.0: Linux PHSA-2024-4.0-0715

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0715. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Grpc PHSA-2024-4.0-0719

An update of the grpc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0719. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2024-3.0-0806

Updates of 'postgresql13' packages of Photon OS have been released...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 14 for SLE 15 SP5) (SUSE-SU-2024:4207-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.1 bug fixes and container updates

Red Hat Advanced Cluster Management for Kubernetes 2.12.1 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS ba...

Moderate: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.2 security updates and bug fixes

Multicluster Engine for Kubernetes 2.7.2 General Availability release images, which provide enhancements, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

Cisco Releases Security Updates for NX-OS Software

Cisco released security updates to address a vulnerability in Cisco NX-OS software. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the following advisory and apply the necessary updates: Cisco NX-OS...

Oracle Linux 9 : postgresql:16 (ELSA-2024-10788)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10788 advisory. - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fixes: CVE-2023-2454 CVE-2023-2455 Tenable has extracted the preceding description block...

Critical Veeam Vulnerabilities Allow Remote Code Execution – Update Now

SUMMARY Veeam, a leading provider of backup, recovery, and data management solutions, has issued urgent security updates to…...

Photon OS 5.0: Linux PHSA-2024-5.0-0405

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0405. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 9

Package name: xms10.15.0.10915.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10808.bin, xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date:...

CVE-2024-12053

creationtimestamp| type| source ---|---|--- 2024-12-03 18:51:47+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590396950354441 2024-12-03 18:56:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113590416932406147 2024-12-03 20:40:58+00:00| seen|...