Solaris 10 (sparc): 151912-25

SunOS 5.10: SunOS 5.10: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Apr/14/25 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255269; scriptversion"1.1";...

Solaris 10 (sparc): 153093-01

SunOS 5.10: SunOS 5.10: mkdir patch. Date this patch was last updated by Sun : Apr/14/25 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255263; scriptversion"1.1";...

Linux Distros Unpatched Vulnerability : CVE-2022-27444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemsubselect.cc. CVE-2022-27444 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2025-38208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: add NULL check in automountfullpath page is checked for null in buildpathfromdentryoptionalprefix when tcon-originfullpath is not set. However, the...

Fedora 40 : jupyterlab (2025-1d68ba6806)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1d68ba6806 advisory. Update to 4.3.6 rhbz2352545 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Solarwinds CatTools Information Disclosure (CVE-2024-45713)

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...

Fedora 40 : libtiff (2024-9c84a7c963)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9c84a7c963 advisory. - fix CVE-2024-7006 rhbz2302997 - fix CVE-2023-52356 rhbz2260112 - fix CVE-2023-6228 rhbz2251863 Tenable has extracted the preceding description blo...

Fedora 39 : yarnpkg (2024-d79685d847)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d79685d847 advisory. Update bundled ws CVE-2024-37890 ---- Update bundled dependencies to fix CVE-2024-48949. Tenable has extracted the preceding description block...

SUSE SLED15: libprotobuf-lite25_1_0 / libprotobuf25_1_0 / libprotoc25_1_0 / etc (SUSE-SU-2024:3746-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3746-1 advisory. - CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer bsc1230778 Tenable has extracted the preceding...

Photon OS 4.0: Go PHSA-2024-4.0-0704

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0704. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid209541...

Slackware Linux 15.0 openssl Vulnerability (SSA:2024-295-01)

The version of openssl installed on the remote host is prior to 1.1.1zb. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-295-01 advisory. New openssl packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding description bloc...

Photon OS 4.0: Wireshark PHSA-2024-4.0-0702

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0702. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 7 : 389-ds-base (ELSA-2024-7434)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7434 advisory. 1.3.11.1-5.0.3 - Security fix for CVE-2024-8445 Orabug: 37119399CVE-2024-8445 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : httpd (ELSA-2024-7101)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7101 advisory. 2.4.6-99.0.5.1 - Differentiate trusted sources Orabug: 37100272CVE-2024-38476 Tenable has extracted the preceding description block directly from the Oracle Lin...

Fedora 40 : python-virtualenv (2024-112e897674)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-112e897674 advisory. - Prevent command injection by quoting template strings in activation scripts Tenable has extracted the preceding description block directly from the Fedora...

Qnap QTS OS Command Injection (CVE-2021-28804)

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc...

Qnap QTS Command Injection (CVE-2020-2492)

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

Qnap QTS Cross-site Scripting (CVE-2024-21897)

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...

Qnap QTS Stack-based Buffer Overflow (CVE-2023-50361)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

Fedora 40 : pdns-recursor (2024-af0bf62ac6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-af0bf62ac6 advisory. Update to latest upstream Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...