65 matches found
HPE Intelligent Management Center < 7.3 E0506P09 - Information Disclosure
!/opt/local/bin/python2.7 Exploit Title: HPE Intelligent Management Center dbman Command 10001 Information Disclosure Date: 22-09-2019 Exploit Author: Rishabh Sharma Linkedin: rishabh2241991 Vendor Homepage: www.hpe.com Software Link:...
RHEL 8 : pango (RHSA-2019:2582)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2582 advisory. Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango forms the core of text and font handling for...
RHEL 7 : ovmf (RHSA-2019:0809)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0809 advisory. OVMF Open Virtual Machine Firmware is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for...
Google Chrome < 63.0.3239.84 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 63.0.3239.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 201712stable-channel-update-for-desktop advisory. - Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84...
ONVIF Camera Snapshot
Nessus was able to acquire a snapshot from the remote camera using the GetProfiles and GetSnapshotUri ONVIF requests. include"compat.inc"; if description scriptid103867; scriptversion"$Revision: 1.3 $"; scriptcvsdate"$Date: 2017/11/15 18:01:11 $"; scriptnameenglish:"ONVIF Camera Snapshot";...
MySQL Server Login Possible
Nessus was able to log into the remote MySQL server using the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid91823; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/01/27"; scriptnameenglish:"MySQL Server Log...
Fedora 22 : firefox-41.0-4.fc22 (2015-16455)
firefox-41.0-4.fc21 - New upstream 41.0 firefox-41.0-4.fc22 - New upstream 41.0 firefox-41.0-4.fc23 - New upstream 41.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora 20 : lftp-4.5.4-3.fc20 (2015-2736)
one bug fixed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
Fedora 20 : python-tornado-2.2.1-7.fc20 (2014-16390)
Add patch to fix CVE-2013-2098 CVE-2013-2099 bug 96627 - Drop requires python-simplejson, not needed for modern python Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
CVE-2014-2848
A race condition in the wmimalwarescan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program...
Fedora 19 : kernel-3.11.6-201.fc19 (2013-20547)
Various bug and CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...
Fedora 17 : puppet-2.7.21-2.fc17 (2013-4187)
Updates for the security announcements from Puppet Labs on 12-Mar-2013. https://groups.google.com/group/puppet-announce/t/9200f268f8479e2c This update also provides backported fixes for a number of issues with ruby-1.9. Note that Tenable Network Security has extracted the preceding description...
Fedora 18 : freetype-2.4.10-3.fc18 (2013-1492)
This update fixes CVE-2012-5669. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
MS KB2794220: Vulnerability in Internet Explorer Could Allow Remote Code Execution (deprecated)
The remote host is missing the workaround referenced in KB 2794220 Microsoft 'Fix it' 50971. This workaround mitigates a use-after-free vulnerability in Internet Explorer. Without this workaround enabled, an attacker could exploit this vulnerability by tricking a user into viewing a maliciously...
MS KB2757760: Vulnerability in Internet Explorer Could Allow Remote Code Execution (deprecated)
The remote host is missing the workaround referenced in KB 2757760 Microsoft 'Fix it' 50939. This workaround mitigates a use-after-free vulnerability in Internet Explorer. Without this workaround enabled, an attacker could exploit this vulnerability by tricking a user into view a maliciously...
Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / current : dhcp (SSA:2012-258-01)
New dhcp packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2012-258-01. The text itse...
RHEL 5 : systemtap (RHSA-2011:1089)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1089 advisory. SystemTap is an instrumentation system for systems running the Linux kernel. The system allows developers to write scripts to collect data on the...
Fedora 14 : thunderbird-3.1.7-2.fc14 (2010-18777)
Update to new upstream Thunderbird version 3.1.7, fixing multiple security issues detailed in the upstream advisory : http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.ht mlthunderbird3.1.7 Note that Tenable Network Security has extracted the preceding description block directly...
Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / current : php (SSA:2010-024-02)
New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-024-02. The text itself ...