Fedora 37 : binwalk (2023-32eb9d8ee7)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-32eb9d8ee7 advisory. Security fix for CVE-2022-4510 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 36 : binwalk (2023-23047a5f4f)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-23047a5f4f advisory. Security fix for CVE-2022-4510 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 37 : chromium (2023-fd4786cc83)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fd4786cc83 advisory. Update to 109.0.5414.119. Fixes the following security issues: CVE-2023-0471 CVE-2023-0472 CVE-2023-0473 CVE-2023-0474 Tenable has extracted the...

Tableau Server Input Validation XSS

The version of Tableau running on the remote host is affected by an XSS vulnerability that could allow malicious actors to extract sensitive data from the application. An attacker could leverage the cross-site scripting vulnerability to conduct an attack against a user and gain access to sensitiv...

GitLab 1.0 < 15.6.7 / 15.7 < 15.7.6 / 15.8 < 15.8.1 (CVE-2022-4138)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before...

Ubuntu 16.04 ESM : LibTIFF vulnerabilities (USN-5841-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5841-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted...

Joomla 4.0.x < 4.2.7 Multiple Vulnerabilities (5876-joomla-4-2-7-security-and-bug-fix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 4.2.7. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the...

Fedora 36 : pgadmin4 (2023-0334c6000a)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0334c6000a advisory. Update to pgadmin4-6.19. ---- Backport fix for CVE-2023-22298. Tenable has extracted the preceding description block directly from the Fedora securi...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2023-032-03)

The version of mozilla-thunderbird installed on the remote host is prior to 102.7.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-032-03 advisory. - Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked...

Ubuntu 16.04 ESM : Django vulnerability (USN-5837-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5837-2 advisory. USN-5837-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : AdvanceCOMP vulnerabilities (USN-5838-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5838-1 advisory. It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG file. If a...

SUSE SLES15 Security Update : libarchive (SUSE-SU-2022:0944-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0944-2 advisory. - CVE-2021-36976: Fixed an invalid memory access that could cause data corruption bsc1188572. Non-security updates: - Updated...

Fedora 36 : mingw-opusfile (2023-528f07b5af)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-528f07b5af advisory. Fix CVE-2022-47021 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Slackware Linux 15.0 / current apr-util Vulnerability (SSA:2023-032-02)

The version of apr-util installed on the remote host is prior to 1.6.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-032-02 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker...

RHEL 9 : pcs (RHSA-2023:0527)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0527 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: sinatra: Reflected File Downlo...

Rocky Linux 9 : grafana (RLSA-2022:8057)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8057 advisory. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if...

Fedora 37 : java-17-openjdk (2023-585aca2233)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-585aca2233 advisory. New in release OpenJDK 17.0.6 2023-01-17 CVEs Fixed - CVE-2023-21835 - CVE-2023-21843 Security Fixes - JDK-8286070: Improve UTF8 representation -...

CentOS 7 : tigervnc (RHSA-2023:0045)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0045 advisory. - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in...

Rocky Linux 8 : python27:2.7 (RLSA-2022:7593)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7593 advisory. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow...

CentOS 7 : firefox (RHSA-2023:0296)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0296 advisory. - An out of date library libusrsctp contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox...