September 10, 2024—KB5043067 (OS Build 22000.3197)

None None...

PT-2024-6158

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to a Windows MSHTML platform spoofing vulnerability, which allows attackers to execute arbitrary code remotely. This vulnerability has been exploited by the...

Fedora 39 : firefox (2024-1304d7f338)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1304d7f338 advisory. - New upstream update 130.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

KB5043124: Servicing stack update for Windows 10, version 1607 and Server 2016: September 10, 2024

None None...

XenServer Security

Introduction We work hard to keep our product secure and endeavour to remediate any exploitable issues. To this end, we regularly release Security Bulletins for vulnerabilites that might affect Citrix Hypervisor and XenServer and software updates that address these vulnerabilities. Overview of th...

KB5044412: Servicing stack update for Windows Server 2012: September 10, 2024

None None...

Security Updates for Microsoft SharePoint Server 2016 (September 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application...

Security Updates for Microsoft SharePoint Server 2019 (September 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application...

KB5044410: Servicing stack update for Windows Server 2012 R2: September 10, 2024

None None...

Siemens Third-Party Component in SICAM and SITIPE Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Security Updates for Microsoft Office Products (September 2024) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by a vulnerability as referenced in the september-10-2024 advisory. - Microsoft Excel Elevation of Privilege Vulnerability CVE-2024-43465 Note that Nessus has not tested for this issue but has instead relied only on...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or...

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Progress Software has released security updates for a maximum-severity flaw in LoadMaster and Multi-Tenant MT hypervisor that could result in the execution of arbitrary operating system commands. Tracked as CVE-2024-7591 CVSS score: 10.0, the vulnerability has been described as an improper input...

Fedora 40 : firefox (2024-9922206495)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9922206495 advisory. - New upstream update 130.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

CVE-2024-8517

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request...

Fedora 39 : python3.9 (2024-dc7f1d57e4)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-dc7f1d57e4 advisory. Security fix for CVE-2024-8088 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 39 : mingw-python3 (2024-7008b2fedf)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7008b2fedf advisory. Add patch for CVE-2024-8088. ---- Update to python-3.11.9. Backport fix for CVE-2024-6923. Tenable has extracted the preceding description block...

Photon OS 5.0: Curl PHSA-2024-5.0-0345

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0345. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: IBM MQ Advanced Message Security on IBM i platform is affected by an issue in OpenSSL (CVE-2024-2511)

Summary An issue was identified with OpenSSL, which IBM MQ on the IBM i platform uses within the Advanced Message Security feature to provide cryptographic functionality. It is not used for transport layer security TLS functionality for IBM MQ channel connections, which is provided by the IBM i...

Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

Veeam has shipped security updates to address a total of 18 security flaws impacting its software products, including five critical vulnerabilities that could result in remote code execution. The list of shortcomings is below - CVE-2024-40711 CVSS score: 9.8 - A vulnerability in Veeam Backup &...