Fedora 41 : wireshark (2024-f9f740bc60)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f9f740bc60 advisory. New version 4.4.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 41 : firefox / nss (2024-b266d38c44)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-b266d38c44 advisory. Update NSS to 3.106.0 Update to Firefox 133.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 40 : python-aiohttp (2024-04ceb82dc7)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-04ceb82dc7 advisory. Security fix for CVE-2024-52304 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : mingw-libsoup (2024-af077c1f85)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-af077c1f85 advisory. Backport fixes for CVE-2024-52530 and CVE-2024-52532. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 40 : firefox / nss (2024-ea7b2e66a1)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-ea7b2e66a1 advisory. Update NSS to 3.106.0 Update to Firefox 133.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

USN-7126-1: libsoup vulnerabilities

It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. CVE-2024-52530 It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An...

Photon OS 4.0: Linux PHSA-2024-4.0-0714

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0714. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-11691

creationtimestamp| type| source ---|---|--- 2024-11-26 13:37:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113549523052042424 2024-12-13 16:10:41+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113646386597505303...

CVE-2024-38833

creationtimestamp| type| source ---|---|--- 2024-11-26 12:01:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113549148342977152 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/1625 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/26626 2024-11-26 15:02:55+00:00|...

CVE-2024-53930

creationtimestamp| type| source ---|---|--- 2024-11-25 03:10:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113541397021426026...

Fedora 40 : needrestart (2024-d2124788a8)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2124788a8 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

MGASA-2024-0368 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.61 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Fedora 41 : libsndfile (2024-1318318e7a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1318318e7a advisory. fix crash in in ogg vorbis 2322326 CVE-2024-50612 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Photon OS 5.0: Linux PHSA-2024-5.0-0407

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0407. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-52616

creationtimestamp| type| source ---|---|--- 2024-11-21 20:47:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113522903838141203 2024-12-24 07:03:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ldzuuk6cwf25 2024-12-31 14:33:27+00:00| seen|...

CVE-2024-10890

creationtimestamp| type| source ---|---|--- 2024-11-21 07:42:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113519815681471528...

PT-2024-9339 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.8.0 through 10.2.11 Drupal Core versions 10.3.0 through 10.3.9 Drupal Core versions 11.0.0 through 11.0.8 Description: The issue is related to insufficient protection of the web page structure, allowing an attacker to...

Oracle Linux 9 : grafana (ELSA-2024-9473)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9473 advisory. - Resolves RHEL-62308: CVE-2024-47875 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : buildah (ELSA-2024-9459)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9459 advisory. - rebuild to fix CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

PT-2024-8392

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. before 8.1.31 PHP versions 8.2. before 8.2.26 PHP versions 8.3. before 8.3.14 Description: The issue is related to an integer overflow in the ldap escape function on 32-bit systems when handling uncontrolled long string...