Linux Distros Unpatched Vulnerability : CVE-2010-1167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attacke...

Linux Distros Unpatched Vulnerability : CVE-2011-2525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The qdiscnotify function in net/sched/schapi.c in the Linux kernel before 2.6.35 does not prevent tcfillqdisc function calls referencing builtin aka CQFBUILTIN...

Linux Distros Unpatched Vulnerability : CVE-2011-1479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service system crash via vectors...

Linux Distros Unpatched Vulnerability : CVE-2011-1159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows...

Linux Distros Unpatched Vulnerability : CVE-2010-1771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote...

Linux Distros Unpatched Vulnerability : CVE-2010-2253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or...

Linux Distros Unpatched Vulnerability : CVE-2007-2348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands vi...

Azure Linux 3.0 Security Update: expat / python3 (CVE-2024-28757)

The version of expat / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28757 advisory. - libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external...

Atlassian Jira Service Management Data Center and Server 10.3.1 (JSDSERVER-15978)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-15978 advisory. - The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerabl...

Amazon Linux 2 : kernel (ALAS-2025-2759)

The version of kernel installed on the remote host is prior to 4.14.355-275.591. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2759 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR metho...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2025:0599-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0599-1 advisory. - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections...

Oracle Linux 9 : postgresql:15 (ELSA-2025-1741)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1741 advisory. - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix CVE-2024-0985 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-3941...

FreeBSD : chromium -- multiple security fixes (2a3be628-ef6e-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2a3be628-ef6e-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

FreeBSD : chromium -- multiple security fixes (b09d0b3b-ef6d-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b09d0b3b-ef6d-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 12 security fixes: Tenable has extracted the...

Security Updates for Microsoft Excel Products C2R (February 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21354, CVE-2025-21362, CVE-2025-21394, CVE-2025-21386, CVE-2025-21390, CVE-2025-21387,...

KB5051987: Windows 11 Version 24H2 / Windows Server 2025 Security Update (February 2025)

The remote Windows host is missing security update 5051987 or hotpatch 5052105. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2025-21208, CVE-2025-21410 - Windows Telephony Service Remote Code...

KB5052006: Windows 10 Version 1607 / Windows Server 2016 Security Update (February 2025)

The remote Windows host is missing security update 5052006. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2025-21208, CVE-2025-21410 - Windows Telephony Service Remote Code Execution Vulnerability...

CBL Mariner 2.0 Security Update: nodejs / nodejs18 (CVE-2023-32002)

The version of nodejs / nodejs18 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32002 advisory. - The use of Module.load can bypass the policy mechanism and require modules outside of the...

KB5052032: Windows Server 2008 R2 Security Update (February 2025)

The remote Windows host is missing security update 5052032. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2025-21208, CVE-2025-21410 - Windows Telephony Service Remote Code Execution Vulnerability...

KB5052042: Windows Server 2012 R2 Security Update (February 2025)

The remote Windows host is missing security update 5052042. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2025-21208, CVE-2025-21410 - Windows Telephony Service Remote Code Execution Vulnerability...