Fedora 28 : buildbot (2019-7eb8c71fe8)

Update to 1.8.1 to fix CVE-2019-7313 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Debian DLA-1667-1 : dovecot security update

It was discovered that there was a vulnerability in the dovecot IMAP/POP3 server. A flaw in the TLS username handling could lead to an attacker logging in as anyone else in the system if both authsslrequireclient,usernamefromcert were enabled. For Debian 8 'Jessie', this issue has been fixed in...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libarchive vulnerabilities (USN-3884-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3884-1 advisory. It was discovered that libarchive incorrectly handled certain 7zip files. An attacker could possibly use this issue to cause a...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : OpenSSH vulnerabilities (USN-3885-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3885-1 advisory. Harry Sintonen discovered multiple issues in the OpenSSH scp utility. If a user or automated system were tricked into connecting ...

NUUO NVRmini upgrade_handle.php Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NUUO NVRmini upgradehandle.php Remote Command Execution', 'Description' = %q This exploits a vulnerability in the web application of NUUO NVRmini...

Photon OS 1.0: Linux PHSA-2018-1.0-0151

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0151. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121851...

Photon OS 2.0: Openssl PHSA-2018-2.0-0078

An update of the openssl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0078. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian DLA-1654-1 : libav security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2014-8542 libavcodec/utils.c omitted a certain codec ID during enforcement of alignment, which allowed remote attackers to cause a denial of ervice out-of-bounds access or possibly...

Photon OS 1.0: Httpd PHSA-2019-1.0-0203

An update of the httpd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0203. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122016...

Photon OS 1.0: Linux PHSA-2016-0014

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2016-0014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121658;...

Photon OS 1.0: Linux PHSA-2017-0019

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0019. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121698;...

Photon OS 1.0: Linux PHSA-2018-1.0-0097

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0097. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121797...

Tenable Nessus < 8.2.2 Stored XSS Vulnerability (TNS-2019-01)

Tenable Nessus is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Photon OS 1.0: Wget PHSA-2017-0023

An update of the wget package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0023. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121710;...

Photon OS 2.0: Curl PHSA-2018-2.0-0068

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0068. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121963;...

Photon OS 2.0: Linux PHSA-2017-0043

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0043. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121754;...

Photon OS 1.0: Openssl PHSA-2018-1.0-0199

An update of the openssl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0199. The text itself is copyright C VMware, Inc. include"compat.inc"; if description...

Photon OS 2.0: Linux PHSA-2018-2.0-0011

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0011. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121909...

Photon OS 1.0: Linux PHSA-2017-0025

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0025. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121716;...

Photon OS 2.0: Linux PHSA-2017-0050

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0050. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121770;...