RHEL 8 : firefox (RHSA-2023:4070)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4070 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 8 : thunderbird (RHSA-2023:4063)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4063 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Security Fixes: Mozilla...

RHEL 8 : nodejs:16 (RHSA-2023:4034)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4034 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

RHEL 8 : nodejs:16 (RHSA-2023:4033)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4033 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

Ubuntu 20.04 ESM / 22.04 ESM : SciPy vulnerabilities (USN-6226-1)

The remote Ubuntu 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6226-1 advisory. It was discovered that SciPy did not properly manage memory operations during reference counting. An attacker could possibly use this issue t...

RHEL 8 : thunderbird (RHSA-2023:4068)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4068 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Security Fixes: Mozilla...

Juniper Junos OS Vulnerability (JSA71642)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71642 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX10000 Series allows a network...

Security Updates for Microsoft ASP.NET Core (July 2023)

Multiple vulnerabilities exist in ASP.NET Core 6.0 6.0.20 and ASP.NET Core 7.0 7.0.9. - A vulnerability exists in .NET applications where the diagnostic server can be exploited to achieve cross-session/cross-user elevation of privilege EoP and code execution. CVE-2023-33127 - A vulnerability exis...

openSUSE 15 Security Update : python-Django (openSUSE-SU-2023:0174-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0174-1 advisory. - In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS regular expression...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.6.2.7)

The version of AOS installed on the remote host is prior to 6.6.2.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.6.2.7 advisory. - A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did n...

Ubuntu 20.04 LTS : lib3mf vulnerability (USN-6216-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6216-1 advisory. It was discovered that lib3mf did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted 3MF file, a loca...

Debian dla-3493 : php-symfony - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3493 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3493-1 [email protected]...

KB5028168: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2023)

The remote Windows host is missing security update 5028168. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

ARM Mali GPU Kernel Driver < r32p0 / < r35p0 Improper Memory Access (CVE-2021-44828)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r32p0 running on Midgard architecture or prior to r35p0 running on Bifrost or Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can get a write acce...

KB5028224: Windows Server 2008 R2 Security Update (July 2023)

The remote Windows host is missing security update 5028224. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

ARM Mali GPU Kernel Driver < r38p1 / r40p0 Improper Memory Access (CVE-2022-36449)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r38p1 or r40p0 running on Midgard, Bifrost or Valhall architecture. It is, therefore affected by an improper memory access vulnerability. A non-privileged user can make improper GPU processing operations to gain...

KB5028186: Windows 10 LTS 1507 Security Update (July 2023)

The remote Windows host is missing security update 5028186. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

KB5028166: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (July 2023)

The remote Windows host is missing security update 5028166. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

KB5028233: Windows Server 2012 Security Update (July 2023)

The remote Windows host is missing security update 5028233. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

KB5028171: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2023)

The remote Windows host is missing security update 5028171. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...