Moxa AWK-3131A serviceAgent Information Disclosure (CVE-2016-8724)

An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted TCP query will allow an attacker to retrieve potentially sensitive information. This plugin only works with Tenable.ot...

NASL Plugin Signature Checks Disabled

This scan was executed with signature checking for Nessus plugins disabled by a scan setting. This permits plugins to run which have not been vetted by Tenable. Unless you have an extremely good reason for enabling this setting, it is recommended that you disable that setting. %NASLMINLEVEL 80900...

EulerOS Virtualization 2.9.1 : openssl (EulerOS-SA-2023-2515)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to...

EulerOS Virtualization 2.9.0 : python-cryptography (EulerOS-SA-2023-2531)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...

EulerOS Virtualization 2.9.0 : freetype (EulerOS-SA-2023-2525)

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further...

Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs

Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs. Hello everyone! This episode will be about Microsoft Patch Tuesday for July 2023, including vulnerabilities that were added between June and July Patch Tuesdays...

EulerOS Virtualization 2.10.0 : open-iscsi (EulerOS-SA-2023-2478)

According to the versions of the open-iscsi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, an...

EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2023-2451)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be...

EulerOS Virtualization 2.10.0 : systemd (EulerOS-SA-2023-2495)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers...

EulerOS Virtualization 2.10.1 : python-cryptography (EulerOS-SA-2023-2466)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected...

Tenable Security Center 6.0.0 / 6.1.0 / 6.1.1 Multiple Vulnerabilities (TNS-2023-26)

According to its self-reported version, the Tenable Security Center running on the remote host is either 6.0.0, 6.1.0 or 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-26 advisory. - Tenable Security Center leverages third-party software to help provid...

EulerOS Virtualization 3.0.6.6 : unbound (EulerOS-SA-2023-2417)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving...

EulerOS Virtualization 3.0.6.6 : dhcp (EulerOS-SA-2023-2409)

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, i...

EulerOS Virtualization 3.0.6.6 : shim-signed (EulerOS-SA-2023-2436)

According to the versions of the shim-signed packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used...

[R1] Stand-alone Security Patch Available for Security Center versions 6.0.0, 6.1.0 and 6.1.1: SC-202307.1-6.x

R1 Stand-alone Security Patch Available for Security Center versions 6.0.0, 6.1.0 and 6.1.1: SC-202307.1-6.x Arnie Cabral Tue, 07/25/2023 - 11:30 Tenable Security Center leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to...

[R1] Stand-alone Security Patch Available for Security Center version 5.23.1: SC-202307.1-5.23.1

R1 Stand-alone Security Patch Available for Security Center version 5.23.1: SC-202307.1-5.23.1 Arnie Cabral Tue, 07/25/2023 - 11:11 Tenable Security Center leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain...

Cisco NX-OS Software NX-API Arbitrary Command Execution (CVE-2018-0313)

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command- injection exploit. The vulnerability is due to incorrect input validation of user-supplie...

Cisco Nexus 7000/7700 Series Switches Software Patch Signature Verification (CVE-2019-1808)

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...

Cisco NX-OS Software Buffer Overflow and Command Injection (CVE-2019-1767)

A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with...

Cisco NX-OS Software Protocol Independent Multicast Denial of Service (CVE-2021-1367)

A vulnerability in the Protocol Independent Multicast PIM feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...