Photon OS 2.0: Linux PHSA-2020-2.0-0251

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0251. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137195...

VLC < 2.0.9 DoS

An exploitable denial of service vulnerability exists in VideoLAN VLC Media Player 2.0.8 and earlier. Allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file. C Tenable Network Security, Inc. include'compat.inc'; if...

Debian DSA-4693-1 : drupal7 - security update

Several vulnerabilities were discovered in Drupal, a fully-featured content management framework, which could result in an open redirect or cross-site scripting. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Druva inSync Windows Client < 6.6.4 Privilege Escalation

The Windows Druva inSync Client Service inSyncCPHwnet64.exe contains a path traversal vulnerability that can be exploited by a local, unauthenticated attacker to execute OS commands with SYSTEM privileges. When processing RPC type 5 requests over TCP port 6064, inSyncCPHwnet64.exe does not proper...

Fedora 31 : ruby (2020-a95706b117)

Update to Ruby 2.6.6. Also fixes CVE-2020-10933 and CVE-2020-10663. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Photon OS 1.0: Salt3 PHSA-2020-1.0-0294

An update of the salt3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0294. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136695...

Photon OS 1.0: Salt PHSA-2020-1.0-0294

An update of the salt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0294. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136694;...

Mozilla Thunderbird < 68.8.0

The version of Thunderbird installed on the remote Windows host is prior to 68.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-18 advisory. - Mozilla developers and community members Alexandru Michis, Jason Kratzer, philipp, Ted Campbell, Bas Schouten, An...

Fedora 30 : python-bleach (2020-827b677e15)

Update to version 3.1.4, an upstream security release. See the upstream changelog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Sophos XG Firewall - SQL Injection

A SQL injection SQLi vulnerability exists in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the disclosure or...

Scientific Linux Security Update : okular on SL7.x x86_64 (20200407)

okular: Directory traversal in function unpackDocumentArchive in core/document.cpp C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135826; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Photon OS 3.0: File PHSA-2020-3.0-0080

An update of the file package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0080. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135790;...

Photon OS 3.0: Python3 PHSA-2020-3.0-0078

An update of the python3 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0078. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135785;...

Scientific Linux Security Update : python on SL7.x x86_64 (20200407)

python: Cookie domain check returns incorrect results python: email.utils.parseaddr wrongly parses email addresses C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135831; scriptversion"1.3";...

Photon OS 1.0: Linux PHSA-2020-1.0-0287

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0287. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135485...

CentOS 7 : libqb (RHSA-2020:1189)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1189 advisory. - libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without...

Microsoft Windows SMBv3 Compression RCE (ADV200005)(CVE-2020-0796)(Remote)

A remote code execution vulnerability exists in Microsoft Server Message Block 3.1.1 SMBv3 protocol due to how it handles a maliciously crafted compressed data packet. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands. Note that this plug...

CentOS 7 : tomcat (RHSA-2020:0855)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0855 advisory. - When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having high...

Fedora 31 : cacti / cacti-spine (2020-10fe60d68b)

Update to 1.2.10 - CVE-2020-8813 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

Photon OS 1.0: Envoy PHSA-2020-1.0-0281

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0281. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134206...