CBL Mariner 2.0 Security Update: fluent-bit / nghttp2 / nodejs / nodejs18 (CVE-2024-28182)

The version of fluent-bit / nghttp2 / nodejs / nodejs18 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28182 advisory. - nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 ...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-20967)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20967 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-20965)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20965 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...

CBL Mariner 2.0 Security Update: nano (CVE-2024-5742)

The version of nano installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5742 advisory. - A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary...

Security Update for Microsoft .NET Core SDK (July 2024)

The version of .NET Core SDK installed on the remote host is 8.x prior to 8.0.7. It is, therefore, affected by remote code execution vulnerability as referenced in the July 2024 advisory: - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-35264 - .NET, .NET Framework, and Visua...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SLE 15 SP2) (SUSE-SU-2024:2341-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2341-1 advisory. This update for the Linux Kernel 5.3.18-15020024172 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed...

Juniper Junos OS Vulnerability (JSA82991)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82991 advisory. - An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based,...

Wireshark 4.2.x < 4.2.6 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.2.6. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.6 advisory. - The SPRT dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire ...

Adobe Bridge 13.x < 13.0.8 / 14.x < 14.1.1 Multiple Vulnerabilities (APSB24-51)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.8 or 14.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-51 advisory. - Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or...

GLSA-202407-23 : LIVE555 Media Server: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202407-23 LIVE555 Media Server: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding...

Juniper Junos OS Vulnerability (JSA82993)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82993 advisory. - An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an unauthenticated, network-based...

Juniper Junos OS Vulnerability (JSA82982)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82982 advisory. - A Heap-based Buffer Overflow vulnerability in the telemetry sensor process sensord of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E causes a stea...

Adobe Bridge 13.x < 13.0.8 / 14.x < 14.1.1 Multiple Vulnerabilities (APSB24-51)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.8 or 14.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-51 advisory. - Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound...

Juniper Junos OS Vulnerability (JSA83007)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83007 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the the IKE daemon iked of Juniper Networks Junos OS on SRX Series, MX Series with SPC3 and NFX350...

Security Updates for Microsoft Visual Studio Products (July 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2024-30105, CVE-2024-38095 - .NET and Visual Studio Remote Code Execution Vulnerability...

KB5040498: Windows Server 2008 R2 Security Update (July 2024)

The remote Windows host is missing security update 5040498. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...

CentOS 9 : openssh-8.7p1-42.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the openssh-8.7p1-42.el9 build changelog. - A security regression CVE-2006-5051 was discovered in OpenSSH's server sshd. There is a race condition which can lead to sshd to handle some...

KB5040485: Windows Server 2012 Security Update (July 2024)

The remote Windows host is missing security update 5040485. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...

KB5040437: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2024)

The remote Windows host is missing security update 5040437. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...

KB5040430: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2024)

The remote Windows host is missing security update 5040430. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...