Fedora 39 : firefox (2024-fc815ee65f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fc815ee65f advisory. - Updated to latest upstream 128.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 39 : squid (2024-8ca9261bdd)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8ca9261bdd advisory. - version update - security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 40 : qt6-qtbase (2024-9bf3ff4133)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-9bf3ff4133 advisory. Fix CVE-2024-39936. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 40 : onnx (2024-d9c7181a19)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d9c7181a19 advisory. Security fix for CVE-2024-5187 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

GitLab 17.0 < 17.0.4 / 17.1 < 17.1.2 (CVE-2024-5470)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with adminpushrules permission may have been able to...

Adobe Premiere Pro < 23.6.7 / 24.0.0 < 24.5.0 Arbitrary code execution (APSB24-46) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 23.6.7, 24.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-46 advisory. - Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that...

AlmaLinux 9 : gvisor-tap-vsock (ALSA-2024:4379)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:4379 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block directly from...

Microsoft Azure Network Watcher VM Extension < 1.4.3320.1 Elevation of Privilege (CVE-2024-35261)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3320.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the...

Security Updates for Microsoft Dynamics 365 (on-premises) (July 2024)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for these issues but has instead relied only on th...

GLSA-202407-20 : KDE Plasma Workspaces: Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202407-20 KDE Plasma Workspaces: Privilege Escalation Multiple vulnerabilities have been discovered in KDE Plasma Workspaces. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding...

openSUSE 15 Security Update : openssh (SUSE-SU-2024:2275-2)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2275-2 advisory. - CVE-2024-6387: Fixed race condition in a signal handler bsc1226642 Tenable has extracted the preceding description block directly from the SUSE security...

Fedora 40 : python3-docs / python3.12 (2024-486cb71423)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-486cb71423 advisory. Update to 3.12.4, fix CVE-2024-4032 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 39 : python3-docs / python3.12 (2024-b3d904cade)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-b3d904cade advisory. Update to 3.12.44, fix CVE-2024-4032 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

CBL Mariner 2.0 Security Update: glibc (CVE-2023-5156)

The version of glibc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5156 advisory. - A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory...

Slackware Linux 15.0 / current httpd Vulnerability (SSA:2024-185-02)

The version of httpd installed on the remote host is prior to 2.4.61. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-185-02 advisory. New httpd packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32610)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32610 advisory. - HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32614)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32614 advisory. - HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c. CVE-2024-32614 Note that Nessus has not test...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-26904)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26904 advisory. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-26904...

AlmaLinux 8 : python3 (ALSA-2024:4245)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:4245 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the AlmaLinux...

CBL Mariner 2.0 Security Update: telegraf (CVE-2023-50658)

The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50658 advisory. - The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption vi...