RHEL 9 : grub2 (RHSA-2023:0752)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0752 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

KB5022834: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (February 2023)

The remote Windows host is missing security update 5022834. It is, therefore, affected by multiple vulnerabilities - Windows iSCSI Discovery Service Remote Code Execution Vulnerability CVE-2023-21803 - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability CVE-2023-21684,...

SUSE SLED15: apache2 / apache2-devel / apache2-doc / apache2-event / etc (SUSE-SU-2023:0322-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0322-1 advisory. - CVE-2022-37436: Fixed an issue in modproxy where a malicious backend could cause the response...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12118)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-12118 advisory. - ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC Sasha Levin Orabug: 34653896 CVE-2022-3303 - Bluetooth: L2CAP: Fix accepting connection request for invali...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12117)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12117 advisory. - ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC Sasha Levin Orabug: 34653896 CVE-2022-3303 - Bluetooth: L2CAP: Fix accepting connection request for invali...

SUSE SLES12 Security Update : syslog-ng (SUSE-SU-2023:0319-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0319-1 advisory. - CVE-2022-38725: Fixed an integer overflow in the RFC3164 protocol parser bsc1207460. Tenable has extracted the preceding description block...

Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)

The version of Adobe Animate installed on the remote Windows host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After Free...

Fedora 37 : syslog-ng (2023-3d44a41fa3)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3d44a41fa3 advisory. Security fix for CVE-2022-38725 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12119)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12119 advisory. - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM Luiz Augusto von Dentz CVE-2022-42896 - drm/i915: fix TLB invalidation for...

Ubuntu 20.04 LTS / 22.04 LTS : WebKitGTK vulnerabilities (USN-5867-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5867-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website,...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2023-12116)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12116 advisory. - netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits Pablo Neira Ayuso Orabug: 34978152 CVE-2023-0179 Tenable has extract...

FreeBSD : phpmyfaq -- multiple vulnerabilities (3eccc968-ab17-11ed-bd9e-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3eccc968-ab17-11ed-bd9e-589cfc0f81b0 advisory. - phpmyfaq developers report: a bypass to flood admin with FAQ proposals stored XSS in questions stored...

Fedora 36 : php-symfony4 (2023-aecde14648)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-aecde14648 advisory. Version 4.4.50 2023-02-01 security cve-2022-24895 Security/Http Remove CSRF tokens from storage on successful login nicolas-grekas security...

Fedora 37 : php-symfony4 (2023-74b702f058)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-74b702f058 advisory. Version 4.4.50 2023-02-01 security cve-2022-24895 Security/Http Remove CSRF tokens from storage on successful login nicolas-grekas security...

Fedora 36 : wireshark (2023-f9e2ad8b73)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f9e2ad8b73 advisory. New version 4.0.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Slackware Linux 15.0 / current gnutls Vulnerability (SSA:2023-041-01)

The version of gnutls installed on the remote host is prior to 3.7.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-041-01 advisory. - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficien...

Oracle Essbase (Jan 2023 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the January 2023 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in Oracle Essbase component: Essbase Web Platform OpenSSL. The supported versi...

Google Chrome < 110.0.5481.77 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 110.0.5481.77. It is, therefore, affected by multiple vulnerabilities as referenced in the 202302stable-channel-update-for-desktop advisory. - Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a...

Debian dla-3316 : libecpg-compat3 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3316 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3316-1 [email protected] https://www.debian.org/lts/security/...

Fedora 37 : pesign (2023-e77628f240)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e77628f240 advisory. - New upstream release 116 - Fix CVE-2022-3560 - This is a privilege escalation in the pesign-authorize script, which is now deprecated. There is no impact...