PT-2024-7873

Name of the Vulnerable Software and Affected Versions Windows Task Scheduler versions prior to the fixed version in November Patch Tuesday Description The vulnerability is an elevation-of-privilege issue in the Windows Task Scheduler, allowing attackers to elevate their privileges to Medium...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2024-317-01)

The version of mozilla-thunderbird installed on the remote host is prior to 128.4.3esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-317-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

Security Updates for Microsoft Word Products (November 2024)

The Microsoft Word Products are missing security updates. They are, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Security Updates for Microsoft Office Products (November 2024)

The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-49031, CVE-2024-49032 Note th...

SUSE SLED15: apache-commons-lang3 / apache-commons-lang3-javadoc / bcel / etc (SUSE-SU-SUSE-RU-2024:3971-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:3971-1 advisory. xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed...

 Intel® Server Board S2600ST Family BIOS and Firmware Update software Advisory

Summary: Potential security vulnerabilities in the Intel® Server Board S2600ST Family BIOS and Firmware Update software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for Intel® Server Boar...

Photon OS 5.0: Linux PHSA-2024-5.0-0393

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0393. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

Hewlett Packard Enterprise HPE has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including two critical bugs that could result in unauthenticated command execution. The flaws affect Access Points running Instant AOS-8 and AOS-10 -...

Fedora 40 : iaito / radare2 (2024-c52c5c8791)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-c52c5c8791 advisory. fix CVE-2024-48241 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 39 : iaito / radare2 (2024-e7c0a0d876)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-e7c0a0d876 advisory. fix CVE-2024-48241 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CVE-2024-46947

creationtimestamp| type| source ---|---|--- 2024-11-08 15:50:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113448127639962307 2024-11-08 15:50:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113448127670506246 2024-11-08 15:53:51+00:00| seen|...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0015)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.91.3- nfsatomicopen: prevent parallel nfslookup on a negative hashed Al Viro Orabug: 370062394.1.12-124.91.2- vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug:...

CVE-2024-47131

creationtimestamp| type| source ---|---|--- 2024-11-07 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02 2024-11-08 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1463/ 2024-11-08 06:00:00+00:00| seen|...

Photon OS 4.0: Linux PHSA-2024-4.0-0708

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0708. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Update of nss

update to CKBI 2.69 from NSS 3.103 - updated certificates: - Certificate "OISTE WISeKey Global Root GC CA" - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma Chambers of...

Photon OS 5.0: Linux PHSA-2024-5.0-0391

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0391. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 8 : Oracle / Linux / Automation / Manager / 2.2 / (MODERATE) (ELSA-2024-12803)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12803 advisory. Oracle Linux Automation Manager 2.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Wear OS Security Bulletin—November 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2024-11-05 or later from the November 2024 Android Security Bulletin in addition to all issues in this bulletin. We encourage al...

Fedora 40 : python-single-version (2024-e82145eb25)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e82145eb25 advisory. Initial import Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora 40 : mysql8.0 (2024-0c1c9227e5)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-0c1c9227e5 advisory. MySQL 8.0.40 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-40.html Tenable has extracted the preceding description block directly...