CentOS 7 : qemu-kvm (RHSA-2020:1208)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1208 advisory. - In libslirp 4.1.0, as used in QEMU 4.2.0, tcpsubr.c misuses snprintf return values, leading to a buffer overflow in later code. CVE-2020-8608 Note that Nessus...

CentOS 7 : firefox (RHSA-2022:6997)

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:6997 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested for this issue but has...

CentOS 7 : lasso (RHSA-2021:2989)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2989 advisory. - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CVE-2021-28091 Note that Nessus has not tested for this issue but ha...

Fedora 40 : perl-App-cpanminus (2024-aaa468ae4f)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-aaa468ae4f advisory. Patch the code to use https instead of http CVE-2024-45321 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Juniper Junos OS Vulnerability (JSA88123)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88123 advisory. - A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a...

CentOS 6 : chromium-browser (RHSA-2020:0005)

The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0005 advisory. - Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploi...

CentOS 7 : qemu-kvm-ma (RHSA-2020:1209)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1209 advisory. - In libslirp 4.1.0, as used in QEMU 4.2.0, tcpsubr.c misuses snprintf return values, leading to a buffer overflow in later code. CVE-2020-8608 Note that Nessus...

CentOS 6 : net-snmp (RHSA-2020:5129)

The remote CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5129 advisory. - Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

Security Updates for Microsoft Excel Products (October 2024)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead...

Google Chrome < 129.0.6668.100 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 129.0.6668.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop8 advisory. - Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a...

Google Chrome < 129.0.6668.100 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 129.0.6668.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop8 advisory. - Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remo...

DeepSpeed < 0.15.1 Command Injection

The remote host contains a DeepSpeedserve version that is prior to 0.15.1. It is, therefore, affected by an arbitrary code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Security Updates for Microsoft SharePoint Server 2019 (October 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid208291;...

Siemens SIMATIC S7-200 SMART Devices Uncontrolled Resource Consumption (CVE-2024-43647)

Affected devices do not properly handle TCP packets with an incorrect structure. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the network cable of the device needs to be unplugged and re-plugged. This plugin only works...

Security Updates for Microsoft SharePoint Server 2016 (October 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid208293;...

Adobe InCopy < 18.5.4 / 19.0 < 19.5.0 Arbitrary code execution (APSB24-79)

The version of Adobe InCopy installed on the remote host is prior to 18.5.4, 19.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-79 advisory. - InCopy versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability...

Security Updates for Microsoft Office Products (October 2024)

The Microsoft Office Products are missing security updates. They are, therefore, affected by a spoofing vulnerability. An attacker can exploit this to gain access to sensitive data via a third party interaction. Note that Nessus has not tested for these issues but has instead relied only on the...

Security Updates for Microsoft SharePoint Server Subscription Edition (October 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security Update for Microsoft .NET Core (October 2024)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-38229 - .NET and Visual Studio Denial of Servic...

Ubuntu 22.04 LTS : WEBrick vulnerability (USN-7057-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7057-2 advisory. USN-7057-1 fixed a vulnerability in WEBrick. This update provides the corresponding updates for Ubuntu 22.04 LTS. Tenable has extracted the preceding description...