Fedora 40 : python3-docs / python3.12 (2024-80d1fe51d0)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-80d1fe51d0 advisory. Update to 3.12.5 Fixes CVE-2024-6923 email header injection Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 39 : python3.11 (2024-a4c978fa1c)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a4c978fa1c advisory. Security fix for CVE-2024-4032 rhbz2293391 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora 39 : zabbix (2024-c89d2ecdea)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c89d2ecdea advisory. Fix for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 40 : zabbix (2024-8382d1b267)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8382d1b267 advisory. Fix for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Photon OS 3.0: Go PHSA-2024-3.0-0783

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0783. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid206084...

SUSE: Security Advisory (SUSE-SU-2024:2994-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 4.0: Vim PHSA-2024-4.0-0671

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0671. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20609...

Photon OS 4.0: Nginx PHSA-2024-4.0-0670

An update of the nginx package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0670. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible null pointer dereference issue in the net/mlx5e component when updating MAC security entities...

Security Updates for Microsoft Office Products C2R (Aug 2024)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-38169, CVE-2024-38170,...

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:1489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2941-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : bind (ELSA-2024-5524)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5524 advisory. - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Photon OS 4.0: Go PHSA-2024-4.0-0668

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0668. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid205741...

Fedora 40 : dotnet8.0 (2024-04cb0f92bc)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-04cb0f92bc advisory. This is the July 2024 security updates for .NET 8. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.7/8.0.107.md - Runtim...

Security Updates for Microsoft Visual Studio Products (August 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET and Visual Studio Information Disclosure Vulnerability. CVE-2024-38167 - .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2024-38168 Note...

Fedora 39 : dotnet8.0 (2024-70741fe21f)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-70741fe21f advisory. This is the July 2024 security updates for .NET 8. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.7/8.0.107.md - Runtim...

Talos discovers 11 vulnerabilities between Microsoft, Adobe software disclosed on Patch Tuesday

Cisco Talos Vulnerability Research team recently discovered 11 vulnerabilities in Microsoft Windows CLIPSP.SYS and Adobe Acrobat Reader that were all disclosed this week as part of the companys regular security updates. For more on Patch Tuesday, check out Talos blog post here. Eight of the...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the...

Vulnerabilities fixed in Ivanti Avalanche

Ivanti has fixed vulnerabilities in Avalanche. A malicious party could exploit the vulnerabilities to cause a denial-of-service, access sensitive data and potentially execute arbitrary code on the system. To successfully achieve code execution, the malicious party must have elevated privileges...