Photon OS 1.0: Grub2 PHSA-2021-1.0-0376

An update of the grub2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0376. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148284...

CentOS 8 : openssl (CESA-2021:1024)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1024 advisory. - openssl: NULL pointer dereference in signaturealgorithms processing CVE-2021-3449 - openssl: CA certificate check bypass with X509VFLAGX509STRICT...

Photon OS 2.0: Containerd PHSA-2021-2.0-0333

An update of the containerd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0333. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Libtiff PHSA-2021-2.0-0332

An update of the libtiff package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0332. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Vulnerabilities fixed in Samsung products

Vulnerabilities have been fixed in several Samsung products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Accessing system data Samsun...

Citrix Releases Security Updates for Hypervisor

Citrix has released security updates to address vulnerabilities in Hypervisor formerly XenServer. An attacker could exploit some of these vulnerabilities to cause a denial-of-service condition. CISA encourages users and administrators to review Citrix Security Update CTX306565 and apply the...

VMware Releases Security Updates

VMware has released security updates to address multiple vulnerabilities affecting vRealize Operations, Cloud Foundation, and vRealize Suite Lifecycle Manager. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

Vulnerability fixed in Foxit products

A vulnerability has been fixed in Foxit products. The vulnerability allows an unauthenticated remote malicious person able to cause a denial-of-service with potentially the execution of arbitrary code under privileges of the victim. To do this, the malicious party must induce the victim to open a...

Fedora 33 : 1:busybox (2021-d20c8a4730)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d20c8a4730 advisory. - decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentati...

Google Releases Security Updates for Chrome

Google has released Chrome version 89.0.4389.114 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. CISA encourages users and administrators to review the Chrome Release Note and apply the necessary updates. Th...

RHEL 8 : openssl (RHSA-2021:1024)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1024 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

Fedora 32 : xen (2021-a468f36bbe)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a468f36bbe advisory. - HVM soft-reset crashes toolstack XSA-368 CVE-2021-28687 - HVM soft-reset crashes toolstack XSA-368 fedora-all CVE-2021-28687 Note that Nessus has...

Fedora 33 : xen (2021-0b784a4d02)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-0b784a4d02 advisory. - HVM soft-reset crashes toolstack XSA-368 CVE-2021-28687 - HVM soft-reset crashes toolstack XSA-368 fedora-all CVE-2021-28687 Note that Nessus has...

[SECURITY] Fedora 33 Update: kernel-5.11.9-200.fc33

The kernel meta package...

Metasploit Wrap-Up

ProxyLogon More Microsoft news this week! Firstly, a big thank you to community contributors GreyOrder, Orange Tsai, and mekhalleh RAMELLA Sébastien, who added three new modules that allow an attacker to bypass authentication and impersonate an administrative user CVE-2021-26855 on vulnerable...

Fedora 32 : dotnet5.0 (2021-138728e59b)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-138728e59b advisory. - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. CVE-2021-26701 Note that Nessus has not tested for this issue but...

Apple Releases Security Updates 

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security pages for the following products and apply the...

Photon OS 2.0: Nxtgn PHSA-2021-2.0-0331

An update of the nxtgn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0331. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148186...

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Samba Security Announcements for...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Cisco Security Advisories page and apply the necessary...