Photon OS 3.0: Linux PHSA-2020-3.0-0065

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0065. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-658)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-658 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix dstnegativeadvice race CVE-2024-36971 Tenable has extracted the preceding description block directly from the tested product...

Photon OS 1.0: Binutils PHSA-2017-0052

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0052. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Nettle PHSA-2020-2.0-0233

An update of the nettle package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0233. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Hikvision IP Cameras Buffer Overflow (CVE-2013-4977)

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 Jan 2013, and possibly other devices, allows remote attackers to cause a denial of service device crash and reboot and possibly execute arbitrary code via a long string in the Range header...

GHSA-F8HX-F4XW-C646 Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference

RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails users that consume RAIL documents from external sources are vulnerable to XXE, which may cause leakage of internal file data via the SYSTEM entity...

CVE-2024-6961

RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails users that consume RAIL documents from external sources are vulnerable to XXE, which may cause leakage of internal file data via the SYSTEM entity...

CVE-2024-6961 XXE in Guardrails AI when consuming RAIL documents

RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails users that consume RAIL documents from external sources are vulnerable to XXE, which may cause leakage of internal file data via the SYSTEM entity...

CVE-2024-6961 XXE in Guardrails AI when consuming RAIL documents

RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails users that consume RAIL documents from external sources are vulnerable to XXE, which may cause leakage of internal file data via the SYSTEM entity...

CVE-2024-6961

CVE-2024-6961 describes an XML External Entity (XXE) vulnerability in Guardrails AI when consuming RAIL documents from external sources, potentially allowing leakage of internal file data via the SYSTEM entity. The affected component is Guardrails AI and its RAIL document handling; the underlying...

Fedora 40 : botan2 (2024-7f42bafbdb)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7f42bafbdb advisory. Rebase to v2.19.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 40 : fluent-bit (2024-07db6333b0)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-07db6333b0 advisory. Update to 3.0.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

AlmaLinux 9 : qt5-qtbase (ALSA-2024:4623)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4623 advisory. qtbase: qtbase: Delay any communication until encrypted can be responded to CVE-2024-39936 Tenable has extracted the preceding description block directly from the...

Ivanti Endpoint Manager - July 2024 Security Update

The version of Ivanti Endpoint Manager running on the remote host lacking the July 2024 Hotfix. It is, therefore, affected by an unspecified SQL Injection vulnerability in the Core server of Ivanti EPM 2024 flat that allows an authenticated attacker within the same network to execute arbitrary...

Slackware Linux 15.0 / current httpd Multiple Vulnerabilities (SSA:2024-200-01)

The version of httpd installed on the remote host is prior to 2.4.62. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-200-01 advisory. New httpd packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

Oracle Linux 9 : qt5-qtbase (ELSA-2024-4623)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4623 advisory. 5.15.9-10 - HTTP2: Delay any communication until encrypted can be responded to Resolves: RHEL-46348 Tenable has extracted the preceding description block direct...

Fedora 39 : golang (2024-5b06c85574)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5b06c85574 advisory. This update fixes CVE-2024-24791 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Slackware Linux 15.0 / current openssl Multiple Vulnerabilities (SSA:2024-199-01)

The version of openssl installed on the remote host is prior to 1.1.1za. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-199-01 advisory. New openssl packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Fedora 39 : yt-dlp (2024-72fb215fcd)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-72fb215fcd advisory. Update to 2024.07.09 ---- Update to 2024.07.07 ---- Update to 2024.07.02 Tenable has extracted the preceding description block directly from the Fedora...

Fedora 39 : erlang-jose (2024-9484b6915b)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-9484b6915b advisory. Re-reviewed Jose ver. 1.11.10 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...