RHEL 9 : skopeo (RHSA-2023:2283)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2283 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

RHEL 9 : qemu-kvm (RHSA-2023:2162)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2162 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide th...

Security Updates for Microsoft Office Products C2R (May 2023)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. CVE-2023-29344 - A denial of service vulnerability. CVE-2023-29333 Note that Nessus has not tested for these issues but has instead...

Fedora 36 : java-11-openjdk (2023-2a2edeb67e)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-2a2edeb67e advisory. updated to java april security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

SUSE-SU-2023:2156-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation bsc1210498. -...

Microsoft Patch Tuesday, May 2023 Edition

Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited in active attacks. First up in Mays zero-day flaws is CVE-2023-29336, which ...

Fedora 37 : community-mysql (2023-af03a123b5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-af03a123b5 advisory. MySQL 8.0.33 Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html Tenable has extracted the preceding description block directly from...

Fedora 38 : community-mysql (2023-06a49d4fb6)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-06a49d4fb6 advisory. MySQL 8.0.33 Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html Tenable has extracted the preceding description block directly from...

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability...

May 9, 2023—KB5026426 (Security-only update)

None None...

May 9, 2023—KB5026408 (Monthly Rollup)

None None...

May 9, 2023—KB5026427 (Security-only update)

None None...

Internet Explorer help

None None...

May 9, 2023—KB5026361 (OS Builds 19042.2965, 19044.2965, and 19045.2965) - EXPIRED

None None...

May 9, 2023—KB5026413 (Monthly Rollup)

None None...

Siemens SICAM P850 and P855 Devices Session Fixation (CVE-2022-40226)

A vulnerability has been identified in SICAM P850 All versions V3.10, SICAM P855 All versions V3.10. Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login. This plug...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to 15393.48.0 Platform version: 113.0.5672.114 for most ChromeOS devices and will be rolled out over the next few days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a...

ALSA-2023:2319 Moderate: git security and bug fix update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...

PT-2023-2722 · Microsoft · Sharepoint Server +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Office Online...

KLA49155 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote...