CBL Mariner 2.0 Security Update: vim (CVE-2022-2344)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2344 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. CVE-2022-2344 Note that Nessus has no...

CBL Mariner 2.0 Security Update: vim (CVE-2021-3968)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3968 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3968 Note that Nessus has not tested for this issue but...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27458)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27458 advisory. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a...

CBL Mariner 2.0 Security Update: vim (CVE-2021-3973)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3973 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3973 Note that Nessus has not tested for this issue but...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2210)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2210 advisory. - Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-2210 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2287)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2287 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2287 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27457)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27457 advisory. - MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component mymbwclatin1 ...

Fedora 36 : sudo (2023-cb5df36beb)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-cb5df36beb advisory. Security fix for CVE-2023-27320 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

SUSE SLES15 Security Update : drbd (SUSE-SU-2023:0800-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:0800-1 advisory. - rebuild the package with the new secure boot key bsc1209188. Tenable has extracted the preceding description block directly from the SUSE security...

Fedora 36 : mingw-binutils (2023-d044484038)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d044484038 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Security Updates for Microsoft Office Products (Mar 2023) (macOS)

The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Excel Remote Code Execution Vulnerability CVE-2023-23399 - Windows Graphics Component Elevation of Privilege Vulnerability CVE-2023-24910 Note...

Fedora 38 : vim (2023-ccf283d7e1)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ccf283d7e1 advisory. The newest upstream patchlevel 1367 Security fix for CVE-2023-1127 Tenable has extracted the preceding description block directly from the Fedora...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2022-3910 - poc !assets/pocsucces...

Fortinet FortiOS - Path Traversal in Execute Command (FG-IR-22-369)

The version of FortiOS installed on the remote host is therefore, affected by a path traversal in execute command vulnerability. A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' in FortiOS may allow a privileged attacker to read and write arbitrary file...

Duplicate Advisory: Cross Site Scripting in eZ Platform Ibexa Kernel

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mrvj-7q4f-5p42. This link is maintained to preserve external references. Original Description Impact In file upload it is possible by certain means to upload files like .html and .js. These may contain XSS...

Fedora 36 : dcmtk (2023-eda976b192)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-eda976b192 advisory. Security fix for CVE-2022-43272 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

China-linked Hackers Targeting Unpatched SonicWall SMA Devices with Malware

A suspecting China-linked hacking campaign has been observed targeting unpatched SonicWall Secure Mobile Access SMA 100 appliances to drop malware and establish long-term persistence. "The malware has functionality to steal user credentials, provide shell access, and persist through firmware...

Scientific Linux Security Update : zlib on SL7.x i686/x86_64 (2023:1095)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2023:1095-1 advisory. - zlib: heap-based buffer over-read and overflow in inflate in inflate.c via a large gzip header extra field CVE-2022-37434 Note that Nessus has not teste...

Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2023:1090)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2023:1090-1 advisory. - samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided CVE-2022-38023 Note that Nessus has not tested for this issue but has instead...

2022 Year-End API ThreatStats™ Report

In 2022, the Wallarm Threat Research team went through almost 350,000 reports to find 650 API-specific vulnerabilities, and tracked 115 published exploits impacting these vulnerabilities – all of which could negatively impact your business risk posture. The 2022 Year-End API ThreatStats™ Report...