Cisco Security Manager < 4.22 Static Credential Usage (cisco-sa-csm-rce-8gjUz9fW)

The version of Cisco Security Manager running on the remote web server is prior to 4.22. It is, therefore, affected static credential usage. An unauthenticated, remote attacker could exploit this, by analyzing the application source code and obtaining credentials, to access sensitive information ...

GLSA-202011-13 : Salt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-13 Salt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Design/Logic Flaw

In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer CEA packets with certain attributes from the Policy and Charging Rules Function PCRF server, the Traffic Management...

CVE-2020-5942

In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer CEA packets with certain attributes from the Policy and Charging Rules Function PCRF server, the Traffic Management...

RHEL 8 : freetype (RHSA-2020:4949)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4949 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

Google Chrome < 86.0.4240.183 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.183. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop advisory. - Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.18...

Google Chrome < 86.0.4240.183 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.183. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop advisory. - Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183...

Google Chrome < 86.0.4240.111 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop20 advisory. - Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a...

Google Chrome < 86.0.4240.111 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop20 advisory. - Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed...

Microsoft 3D Viewer Base3D Code Execution (October 2020)

The Microsoft 3D Viewer app installed on the remote host is affected by a code execution vulnerability when the Base3D rendering engine improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. C Tenable Network Security, Inc...

Photon OS 2.0: Grub2 PHSA-2020-2.0-0267

An update of the grub2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0267. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139243...

openSUSE Security Update : tomcat (openSUSE-2020-1102)

This update for tomcat fixes the following issues : - Fixed CVEs : - CVE-2020-13934 bsc1174121 - CVE-2020-13935 bsc1174117 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Telnet Vulnerability Affecting Cisco Products: June 2020 (cisco-sa-telnetd-EFJrEzPx)

According to its self-reported version, Cisco IOS XE Software is affected by a Telnet vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Photon OS 2.0: Perl PHSA-2020-2.0-0254

An update of the perl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0254. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137719;...

Cisco Adaptive Security Appliance Software OSPF Packets Processing Memory Leak (cisco-sa-asa-ftd-ospf-memleak-DHpsgfnv)

According to its self-reported version, Adaptive Security Appliance ASA Software is affected by a vulnerability in the Open Shortest Path First OSPF implementation due to incorrect processing of certain OSPF packets. An unauthenticated, remote attacker can exploit this, by sending a series of...

Fedora 31 : 4:perl (2020-fd73c08076)

Fixed CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 32 : 4:perl (2020-4021bf2ae8)

Fixed CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 31 : log4net (2020-847775bf79)

Security fix for CVE-2018-1285 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 30 : log4net (2020-cfc319e067)

Security fix for CVE-2018-1285 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Debian DSA-4673-1 : tomcat8 - security update

Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector disabled by default in Debian. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...