SonicWall Secure Mobile Access (SMA) SQLi (SNWLID-2021-0017)

The remote host is a SonicWall Secure Mobile Access SMA device that is affected by an SQL injection vulnerability due to improper neutralization of an SQL command. An unauthenticated, remote attacker can exploit this to run SQL commands. Note that Nessus has not tested for this issue but has...

RHEL 8 : openssl (RHSA-2022:1112)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1112 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

RHEL 7 : kernel (RHSA-2022:1106)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1106 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Use After Free in unixgc which...

Microsoft Edge (Chromium) < 99.0.1150.55 Vulnerability

The version of Microsoft Edge installed on the remote Windows host is prior to 99.0.1150.55. It is, therefore, affected by a vulnerability as referenced in the March 26, 2022 advisory. - Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit...

SUSE SLES15 Security Update : json-c (SUSE-SU-2022:0184-2)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:0184-2 advisory. - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. bsc1171479 Tenable has extracted the preceding description block directly from the SU...

Oracle Linux 8 : vim (ELSA-2022-0366)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0366 advisory. - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read - CVE-2021-4192 vim: vulnerable to Use After Free - 2028341 - CVE-2021-3984 vim: illegal memory...

RHEL 8 : polkit (RHSA-2022:0265)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0265 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

ThinkPHP < 5.0.24 RCE

The version of ThinkPhP installed on the remote host is prior to 5.0.24. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to execute arbitrary php code through multiple parameters. Note that Nessus has not tested for this...

CentOS 8 : gcc-toolset-11-gcc (CESA-2021:4586)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4586 advisory. - Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 Note that Nessus has not tested for thi...

Oracle Linux 8 : json-c (ELSA-2021-4382)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4382 advisory. - Fix CVE-2020-12762 out-of-bounds write via a large JSON file Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 34 : 2:vim (2021-968f57ec98)

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-968f57ec98 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778 - vim is vulnerable to Use After Free CVE-2021-3796 Note that Nessus has not tested...

Photon OS 2.0: Vim PHSA-2021-2.0-0400

An update of the vim package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0400. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

Photon OS 4.0: Vim PHSA-2021-4.0-0110

An update of the vim package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0110. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

Security Updates for Microsoft Sharepoint 2016 (September 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple Server Spoofing Vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Security Updates for Microsoft Excel Products (September 2021)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-38655, CVE-2021-38660 %NASLMINLEV...

Photon OS 2.0: Cpio PHSA-2021-2.0-0388

An update of the cpio package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0388. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

openSUSE 15 Security Update : haproxy (openSUSE-SU-2021:1167-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1167-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...

Photon OS 2.0: C PHSA-2021-2.0-0378

An update of the c package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0378. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc';...

Photon OS 3.0: Util PHSA-2021-3.0-0283

An update of the util package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0283. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

Photon OS 3.0: Curl PHSA-2021-3.0-0273

An update of the curl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0273. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...