KB4022715: Windows 10 Version 1607 and Windows Server 2016 June 2017 (CVE-2017-8529) (deprecated)

This plugin was depredated as it was referencing a CVE which wasn't properly fixed until September 2017. The replacement plugin addresses all Windows 10 / Server 2016 registry requirements for CVE-2017-8 deprecais plugin was depredated as it was referencing a CVE which wasn't properly fixed until...

OPENSUSE-SU-2020:0014-1 Security update for php7-imagick

This update for php7-imagick fixes the following issues: Upgrade to version 3.4.4: Added: function Imagick::optimizeImageTransparency METRICSTRUCTURALSIMILARITYERROR METRICSTRUCTURALDISSIMILARITYERROR COMPRESSIONZSTD - https://github.com/facebook/zstd COMPRESSIONWEBP CHANNELCOMPOSITEMASK...

SSL/TLS Deprecated Ciphers Unsupported

The remote host has open SSL/TLS ports which advertise deprecated cipher suites. The ciphers contained in these suites are no longer supported by most major ssl libraries such as OpenSSL, NSS, Mbed TLS, and wolfSSL and, as such, should not be used for secure communication. Nessus 8.9 and later no...

SSLv2-Only Open Ports Unsupported

This plugin detects if the remote host has any open ports which only support SSLv2. This protocol has been deprecated since 2011 because of security vulnerabilities and most major SSL libraries such as OpenSSL, NSS, Mbed TLS, and wolfSSL do not provide this functionality in their latest versions...

CVE-2019-11993

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now...

Denial of service

In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service...

SSL/TLS Deprecated Ciphers (deprecated)

The remote host has open SSL/TLS ports which advertise deprecated cipher suites. The ciphers contained in these suites are no longer supported by most major ssl libraries such as OpenSSL, NSS, Mbed TLS, and wolfSSL and, as such, should not be used for secure communication. Nessus 8.9 and later no...

Policy Compliance Library Updates, November 2019

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

openSUSE Security Update : haproxy (openSUSE-2019-2556)

This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues : Security issue fixed : - CVE-2019-14241: Fixed a cookie memory corruption problem. bsc1142529 The update to 2.0.5 brings lots of features and bugfixes : - new internal native HTTP representation called HTX, was...

PT-2019-14697 · Jenkins · Jenkins Anchore Container Image Scanner Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Anchore Container Image Scanner Plugin versions 1.0.19 and earlier Description: The plugin stores credentials unencrypted in job config.xml files on the Jenkins master, allowing users with Extended Read permission or access to the...

Prototype Pollution

Overview Versions of angular prior to 1.7.9 are vulnerable to prototype pollution. The deprecated API function merge does not restrict the modification of an Object's prototype in the , which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendatio...

Slither v0.6.7 - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

Oracle MySQL Server 5.3 <= 5.3.13 / 8.0 <= 8.0.17 Security Update (cpuoct2019) - Windows

Oracle MySQL Server is prone to a vulnerability. This VT has been deprecated because it doesn SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only i...

Windows 10, Server 2016 and Server 2019 September 2019 Security Update (CVE-2019-1367) (deprecated)

The plugin has been deprecated because it is preventing the reporting of valid vulnerabilities due to the way Microsoft handles the jscript file C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/06/01. Deprecated due to FN issues with jscript & cumulative updates. include"compat.inc"...

Fortinet FortiOS (Mac OS X) 5.6.0 < 5.6.8 / 6.0.x < 6.0.5 multiple pre-auth XSS vulnerabilities on SSL VPN (FG-IR-18-383) (deprecated)

The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-18-383.nasl plugin ID 128278 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-18-383.nasl include"compat.inc"; if description scriptid12827...

Fedora 29 : nfdump (2019-9013b5e75d)

2019-08-14 - Fix compile issues - Fix output buffer size for lzo1xdecompresssafe 2019-08-07 - Fix VerifyExtensionMap 179 2019-08-06 - Fix compile errors 2019-08-05 - Fix nfdump.1 man page. 175 - Fix off by 1 array. 173 - Fix use after free in ModifyCompressFile - Add bound checks in AddExporterSt...

Side-channel Attack

openjdk is vulnerable to side-channel attack. An unknown difficult to exploit vulnerability allows an unauthenticated attacker with access to gain unauthorizaed access to critical system resources due to security risks arising from using deprecated functions within Elliptic Curve EC cryptography...

PT-2019-6436

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 3.4.7 OpenCV versions 4.x prior to 4.1.1 Description The issue is related to an out of bounds read in the cv::predictOrdered function in modules/objdetect/src/cascadedetect.hpp. This can lead to denial of service and...

Command Injection in open

Versions of open before 6.0.0 are vulnerable to command injection when unsanitized user input is passed in. The package does come with the following warning in the readme: The same care should be taken when calling open as if you were calling childprocess.exec directly. If it is an executable it...

Fortinet FortiOS (Mac OS X) < 5.2.15, 5.4.0 < 6.0.5 SSL VPN Web Portal Host Header Redirection (FG-IR-19-002) (deprecated)

The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-19-002.nasl plugin ID 125889 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-19-002.nasl include"compat.inc"; if description scriptid12589...