7564 matches found
CVE-2024-21662 vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips...
openssh security update
7.4p1-23.0.3fips - Change Epoch from 1 to 10 - Enable fips KDF POST Orabug: 32461750 - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method Orabug: 32461739 7.4p1-23.0.3 - add KEXINITIAL flag Orabug: 36160445 - implement 'strict key exchange' CVE-2023-48795Orabug: 36160445...
GHSA-JWV5-8MQV-G387 vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips...
EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2024-1392)
According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...
EulerOS Virtualization 2.10.0 : openssl (EulerOS-SA-2024-1387)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very...
EulerOS Virtualization 2.10.1 : shim (EulerOS-SA-2024-1371)
According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...
SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2024:0832-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0832-1 advisory. - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file bsc1219243. Tenable has extracted the preceding...
EulerOS 2.0 SP8 : compat-openssl10 (EulerOS-SA-2024-1258)
According to the versions of the compat-openssl10 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...
EulerOS 2.0 SP11 : openssl (EulerOS-SA-2024-1242)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...
SUSE SLES12: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2024:0814-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0814-1 advisory. - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file bsc1219243. Tenable has extracted the preceding...
GHSA-HJ3V-M684-V259 vulnerabilities
Vulnerabilities for packages: falcoctl, boring-registry, mc-fips, boring-registry-fips, external-secrets-fips, mc, spire-server-fips, spire-server, minio, minio-fips, falcoctl-fips...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, argo-workflows-fips, ferretdb, kots, caddy-fips, src, step, trillian-fips, argo-workflows, amass, falcosidekick-fips, kine, spicedb, temporal-server-fips, caddy, kube-bench-fips, step-ca, kube-bench, temporal-server, k3s, trillian...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: k8sgpt, kube-logging-logging-operator, golangci-lint, prometheus-bind-exporter, fulcio, temporal, terraform-provider-google, cilium-cli, metacontroller, litefs, cass-operator-fips, kubescape, kubewatch, oauth2-proxy, zarf, dex-fips, goreleaser, pgpool2exporter,...
Amazon Linux 2 : openssl11 (ALAS-2024-2478)
The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2478 advisory. Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack The...
GHSA-R3W7-MFPM-C2VW vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, argo-workflows-fips, ferretdb, kots, caddy-fips, src, step, trillian-fips, argo-workflows, amass, falcosidekick-fips, kine, spicedb, temporal-server-fips, caddy, kube-bench-fips, step-ca, kube-bench, temporal-server, k3s, trillian...
CVE-2024-2048 vulnerabilities
Vulnerabilities for packages: k3d...
openSUSE: Security Advisory for mozilla (SUSE-SU-2022:2533-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4469-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...