Rocky Linux 8 : python-jinja2 (RLSA-2024:4231)

The remote Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:4231 advisory. jinja2: accepts keys containing non-attribute characters CVE-2024-34064 Tenable has extracted the preceding description block directly from the Rocky Linux...

Rocky Linux 9 : openssh (RLSA-2024:4457)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:4457 advisory. openssh: Possible remote code execution due to a race condition in signal handling affecting Rocky Linux 9 CVE-2024-6409 Tenable has extracted the preceding...

Rocky Linux 8 : python-pillow (RLSA-2024:4227)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:4227 advisory. python-pillow: buffer overflow in imagingcms.c CVE-2024-28219 Tenable has extracted the preceding description block directly from the Rocky Linux security...

Fedora 39 : python3.6 (2024-7bba7e65d3)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7bba7e65d3 advisory. Security fix for CVE-2024-4032 rhbz2293394 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 40 : yarnpkg (2024-eef12396fc)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-eef12396fc advisory. Backport fix for CVE-2024-4067. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SAP NetWeaver AS ABAP Information Disclosure (3454858)

Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive information with low impact on...

SUSE SLES15 Security Update : skopeo (SUSE-SU-2024:2383-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2383-1 advisory. - CVE-2024-3727: Added missing image digest verification bsc1224123. Tenable has extracted the preceding description block directly from the...

GitLab 17.0 < 17.0.4 / 17.1 < 17.1.2 (CVE-2024-5470)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Guest user with adminpushrules permission may have been able to...

Fedora 40 : onnx (2024-d9c7181a19)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d9c7181a19 advisory. Security fix for CVE-2024-5187 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 40 : qt6-qtbase (2024-9bf3ff4133)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-9bf3ff4133 advisory. Fix CVE-2024-39936. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 39 : firefox (2024-fc815ee65f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fc815ee65f advisory. - Updated to latest upstream 128.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 39 : squid (2024-8ca9261bdd)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8ca9261bdd advisory. - version update - security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

AlmaLinux 9 : gvisor-tap-vsock (ALSA-2024:4379)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:4379 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block directly from...

Adobe Premiere Pro < 23.6.7 / 24.0.0 < 24.5.0 Arbitrary code execution (APSB24-46) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 23.6.7, 24.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-46 advisory. - Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that...

Microsoft Azure Network Watcher VM Extension < 1.4.3320.1 Elevation of Privilege (CVE-2024-35261)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3320.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the...

Security Updates for Microsoft Dynamics 365 (on-premises) (July 2024)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for these issues but has instead relied only on th...

GLSA-202407-20 : KDE Plasma Workspaces: Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202407-20 KDE Plasma Workspaces: Privilege Escalation Multiple vulnerabilities have been discovered in KDE Plasma Workspaces. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding...

openSUSE 15 Security Update : openssh (SUSE-SU-2024:2275-2)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2275-2 advisory. - CVE-2024-6387: Fixed race condition in a signal handler bsc1226642 Tenable has extracted the preceding description block directly from the SUSE security...

Fedora 40 : python3-docs / python3.12 (2024-486cb71423)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-486cb71423 advisory. Update to 3.12.4, fix CVE-2024-4032 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 39 : python3-docs / python3.12 (2024-b3d904cade)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-b3d904cade advisory. Update to 3.12.44, fix CVE-2024-4032 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...