Fedora 40 : thunderbird (2024-a27e8b69a0)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a27e8b69a0 advisory. Update to 128.2.0 https://www.thunderbird.net/en-US/thunderbird/128.2.0esr/releasenotes/ Tenable has extracted the preceding description block...

FileZilla < 3.67.0 Insecure Key Recovery Vulnerability (CVE-2024-31497)

The FileZilla application installed on the remote host is prior to 3.67.0. It is, therefore, affected by a key recovery vulnerability where biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. Note that Nessu...

Oracle Linux 7 : libndp (ELSA-2024-4622)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4622 advisory. 1.2-10.0.1 - Increasing release number as per Oracle package release policy Tenable has extracted the preceding description block directly from the Oracle Linux...

AlmaLinux 9 : orc (ALSA-2024:6184)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6184 advisory. orc: Stack-based buffer overflow vulnerability in ORC CVE-2024-40897 Tenable has extracted the preceding description block directly from the AlmaLinux security...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / libopenssl3 / etc (SUSE-SU-2024:3105-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3105-1 advisory. - CVE-2024-6119: Fixed denial of service in X.509 name checks bsc1229465 Tenable has extracted the...

SEH Computertechnik UTN Server PRO and INU-100 OS Command Injection (CVE-2024-5421)

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below. This plugin only works with Tenable.ot. Plea...

SUSE SLED15 / SLES15 Security Update : graphviz (SUSE-SU-2024:1351-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1351-2 advisory. - CVE-2023-46045: Fixed out-of-bounds read via a crafted config6a file bsc1219491 Tenable has extracted the preceding...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2024:3107-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3107-1 advisory. - CVE-2024-6119: Fixed denial of service in X.509 name checks bsc1229465 Tenable has extracted the preceding description block directly from...

AlmaLinux 9 : python3.11 (ALSA-2024:6179)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6179 advisory. cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection CVE-2024-6923 Tenable has extracted the preceding...

AlmaLinux 9 : wget (ALSA-2024:6192)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:6192 advisory. wget: Misinterpretation of input may lead to improper behavior CVE-2024-38428 Tenable has extracted the preceding description block directly from the AlmaLinux...

Oracle Linux 9 : postgresql (ELSA-2024-5999)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5999 advisory. - Fix CVE-2024-0985 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417 Tenable has extracted the preceding description block directly from...

Slackware Linux 15.0 / current seamonkey Vulnerability (SSA:2024-247-02)

The version of seamonkey installed on the remote host is prior to 2.53.19. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-247-02 advisory. New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

Oracle Linux 9 : python3.9 (ELSA-2024-6163)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6163 advisory. - Security fix for CVE-2024-8088 Resolves: RHEL-55968 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : python-urllib3 (ELSA-2024-6162)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6162 advisory. - Security fix for CVE-2024-37891 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 9 : python3.12 (ELSA-2024-6146)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6146 advisory. - Security fix for CVE-2024-8088 Resolves: RHEL-55964 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 9 : wget (ELSA-2024-6192)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6192 advisory. 1.21.1-8 - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior Tenable has extracted the preceding description block directly from t...

Ubuntu 14.04 LTS : Drupal vulnerabilities (USN-6981-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6981-2 advisory. USN-6981-1 fixed vulnerabilities in Drupal. This update provides the corresponding updates for Ubuntu 14.04 LTS. Tenable has extracted the preceding...

Fedora 40 : vim (2024-bb4b6da0b6)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bb4b6da0b6 advisory. patchlevel 703 Security fixes for CVE-2024-43374, CVE-2024-43802 Tenable has extracted the preceding description block directly from the Fedora...

FreeBSD : firefox -- multiple vulnerabilities (5e4d7172-66b8-11ef-b104-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5e4d7172-66b8-11ef-b104-b42e991fc52e advisory. [email protected] reports: Tenable has extracted the preceding description block directly...

AlmaLinux 8 : postgresql:12 (ALSA-2024:6000)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6000 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly from...