Fedora 40 : webkit2gtk4.0 (2024-8f88cdf4e5)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8f88cdf4e5 advisory. Update to 2.46.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 38 : rust-capnp / rust-sequoia-octopus-librnp (2022-15c504b6eb)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-15c504b6eb advisory. Update the capnp crate to version 0.14.11 to address CVE-2022-46149 / RUSTSEC-2022-0068. This update also includes a rebuild of the only affected application...

Fedora 37 : samba (2022-8a9a568dbe)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-8a9a568dbe advisory. Update to version 4.17.2 to address CVE-2022-3592 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 41 : golang-github-prometheus-alertmanager (2024-8580c06716)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8580c06716 advisory. Automatic update for golang-github-prometheus-alertmanager-0.27.0-1.fc41. Changelog Thu Apr 18 2024 Mikel Olasagasti Uranga - 0.27.0-1 - Update to 0.27.0 -...

Fedora 37 : OpenImageIO / ctk / dcmtk (2022-73bf8ee661)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-73bf8ee661 advisory. Security fix for CVE-2021-41688, CVE-2021-41690, CVE-2021-41687, CVE-2021-41689 Tenable has extracted the preceding description block directly from...

Fedora 37 : python3.8 (2022-cb47d98a05)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-cb47d98a05 advisory. Security fix for CVE-2022-37454 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : thunderbird (2022-c6922f983b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c6922f983b advisory. Update to 102.5.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/ ; https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes/ ;...

Medium: python3.11-pip

Issue Overview: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Affected Packages: python3.11-pip Issue Correction: Run dnf update python3.11-pip --releasever 2023.6.20241111 to update your system. New Packages: noarch: ...

Important: xorg-x11-server

Issue Overview: A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions wher...

Fedora 37 : sfnt2woff-zopfli (2022-8d29386f00)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8d29386f00 advisory. Fix a possible double free in woffEncode Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : python3.8 (2022-18b234c18b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-18b234c18b advisory. Update to 3.8.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 41 : python-werkzeug (2024-08eb67ed86)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-08eb67ed86 advisory. - Update to 3.0.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 41 : koji (2024-825c52d96f)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-825c52d96f advisory. Update to 1.35.1. Includes fix for CVE-2024-9427 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 41 : expat (2024-671549e74c)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-671549e74c advisory. Rebase to version 2.6.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 41 : mingw-qt5-qt3d / mingw-qt5-qtactiveqt / mingw-qt5-qtbase / etc (2024-02ccd4daed)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-02ccd4daed advisory. Update to qt-5.15.12. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2024-34787

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

openSUSE 15 Security Update : python-PyPDF2 (openSUSE-SU-2024:0366-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2024:0366-1 advisory. - CVE-2022-24859: Fixed infinite loop vulnerability boo1198588 Tenable has extracted the preceding description block directly from the SUSE security...

Siemens SCALANCE M-800 Family Improper Limitation of a Pathname to a Restricted Directory (CVE-2024-50559)

Affected devices do not properly validate the filenames of the certificate. This could allow an authenticated remote attacker to append arbitrary values which will lead to compromise of integrity of the system. This plugin only works with Tenable.ot. Please visit...

Fedora 40 : chromium (2024-011c4d53e5)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-011c4d53e5 advisory. Update to 130.0.6723.116 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2024-39620 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.3 Ivanti Policy Secure versions prior to 22.7R1.2 Description: A use-after-free issue allows a remote authenticated attacker to achieve remote code execution. This can potentially allow hackers t...