Apple iOS < 8.3 Multiple Vulnerabilities

Binary data 8803.prm...

SuSE 11.3 Security Update : KVM (SAT Patch Number 10672)

KVM was updated to fix a buffer overflow in the floppy drive emulation, which could be used to carry out denial of service attacks or potential code execution against the host. This vulnerability is also known as VENOM. CVE-2015-3456 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Apple iOS < 8.1.4 Multiple Vulnerabilities

Binary data 8673.prm...

Fedora 22 : compat-libuv010-0.10.34-1.fc22 (2015-2563)

It was found that libuv does not call setgoups before calling setuid/setgid. This may potentially allow an attacker to gain elevated privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Oracle OpenSSO SAML Multiple Vulnerabilities (January 2015 CPU)

The remote Oracle OpenSSO component in the Oracle Fusion Middleware install is missing a vendor-supplied security update. It is, therefore, affected by multiple unspecified vulnerabilities in the SAML subcomponent. Note that these vulnerabilities are unspecified by Oracle but appear to be...

Fedora 21 : xorg-x11-server-1.16.2.901-1.fc21 (2014-16623)

upstream security release. 1.16.2.901 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Amazon Linux AMI : php-ZendFramework (ALAS-2014-460)

The 1 ZendLdap class in Zend before 1.12.9 and 2 Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind. CVE-2014-8088 The 1.12.9, 2.2.8, and 2.3.3 releas...

Fedora 21 : java-1.8.0-openjdk-1.8.0.25-0.b18.fc21 (2014-12935)

Updated to security u25. Security bugs are same as for http://blog.fuseyism.com/index.php/2014/10/15/security-icedtea-2-5-3-f or-openjdk-7-released/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

Microsoft Office Word Remote Code Execution Vulnerability (3000434) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS14-061. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Amazon Linux AMI : nss-softokn (ALAS-2014-423)

A flaw was found in the way NSS parsed ASN.1 Abstract Syntax Notation One input from certain RSA signatures. A remote attacker could use this flaw to forge RSA certificates by providing a specially crafted signature to an application using NSS. C Tenable Network Security, Inc. The descriptive tex...

Fedora 19 : wordpress-3.9.2-3.fc19 (2014-9270)

Upstream announcement: http://wordpress.org/news/2014/08/wordpress-3-9-2/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 20 : bugzilla-4.2.10-1.fc20 (2014-8920)

This version of bugzilla includes a security fix for CVE-2014-1546. With previous versions, an attacker can get access to some bug information using the victim's credentials using a specially crafted HTML page. Note that Tenable Network Security has extracted the preceding description block...

openSUSE Security Update : php5 (openSUSE-SU-2012:0695-1)

Specially crafted tar archives could cause an integer overflow in the phar extension %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-311. The text description of this plugin is C...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2949660)

This host is missing a critical security update according to Microsoft Bulletin MS14-017. OpenVAS Vulnerability Test $Id: gbmscompatpackms14-017.nasl 6735 2017-07-17 09:56:49Z teissa $ Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities 2949660 Authors: Antu Sanadi Copyright...

Oracle Linux 5 : openldap (ELSA-2014-0206)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0206 advisory. - fix: CVE-2013-4449 segfault on certain queries with rwm overlay 1064145 Tenable has extracted the preceding description block directly from the Oracle Linux...

Microsoft Office Remote Code Execution Vulnerabilities-2885080 (Mac OS X)

This host is missing an important security update according to Microsoft Bulletin MS13-085. OpenVAS Vulnerability Test $Id: secpodms13-085macosx.nasl 4570 2016-11-18 10:17:05Z antu123 $ Microsoft Office Remote Code Execution Vulnerabilities-2885080 Mac OS X Authors: Antu Sanadi Copyright: Copyrig...

Oracle Linux 5 : kvm (ELSA-2009-1659)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1659 advisory. - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z Tenable has extracted the preceding description block...

Oracle Linux 5 : bind97 (ELSA-2011-1459)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1459 advisory. 32:9.7.0-6.P2.4 - fix DOS against recursive servers 754398 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 5 : systemtap (ELSA-2011-1089)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1089 advisory. 1.3-9 - bz716489 patch Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested f...

Fedora 18 : xen-4.2.2-1.fc18 (2013-6641)

update to xen-4.2.2 which includes security fixes, make xendomains work better with xl Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...