SUSE SLED15: gdk-pixbuf-devel / gdk-pixbuf-devel-32bit / gdk-pixbuf-lang / etc (SUSE-SU-2022:2995-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2995-1 advisory. Update to version 2.42.8, including the following: - CVE-2021-46829: Fixed a heap-based buffer overflow...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2022:3007-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3007-1 advisory. Firefox Extended Support Release 91.13.0 ESR bsc1202645: - CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error...

SUSE SLED15: postgresql12 / postgresql12-contrib / postgresql12-devel / etc (SUSE-SU-2022:2988-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2988-1 advisory. - Update to 12.12: - CVE-2022-2625: Fixed an issue where extension scripts would replace objects not...

IBM Cognos Analytics Multiple Vulnerabilities (6616285)

The version of IBM Cognos Analytics installed on the remote host is affected by multiple vulnerabilities, including the following: - The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is parsed ...

SUSE SLES15 Security Update : libtirpc (SUSE-SU-2022:2991-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2991-1 advisory. - CVE-2021-46828: Fixed an uncontrolled file descriptor consumption, which could be exploited by remote attackers to prevent applications...

Google Chrome < 105.0.5195.102 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 105.0.5195.102. It is, therefore, affected by a vulnerability as referenced in the 202209stable-channel-update-for-desktop advisory. - Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowe...

SUSE SLES12 Security Update : open-vm-tools (SUSE-SU-2022:2962-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2962-1 advisory. - CVE-2022-31676: Fixed an issue that could allow unprivileged users inside a virtual machine to escalate privileges bsc1202657. Tenable has extracted...

SUSE SLES15 Security Update : bluez (SUSE-SU-2022:2948-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2948-1 advisory. - CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol bsc1194704. - CVE-2019-8922: Fixed a buffer...

CentOS 7 : thunderbird (RHSA-2022:6169)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6169 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar...

SUSE SLES15: libecpg6 / libpq5 / libpq5-32bit / postgresql12 / etc (SUSE-SU-2022:2958-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2958-1 advisory. - Upgrade to 12.12: - CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.1082)

The version of AHV installed on the remote host is prior to 20201105.1082. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.1082 advisory. - Perl before 5.30.3 has an integer overflow related to mishandling of a PLregkindOPn == NOTHING situation. A...

GLSA-202208-37 : Mozilla Firefox: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-37 Mozilla Firefox: Multiple Vulnerabilities - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used...

SUSE SLES15: postgresql10 / postgresql10-contrib / postgresql10-devel / etc (SUSE-SU-2022:2946-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2946-1 advisory. - Upgrade to 10.22: - CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that...

CentOS 7 : firefox (RHSA-2022:6179)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6179 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar...

AlmaLinux 8 : firefox (ALSA-2022:6175)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:6175 advisory. - An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar...

Google Chrome < 105.0.5195.52 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 105.0.5195.52. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop30 advisory. - Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to...

Security Updates for Microsoft Azure Site Recovery (July 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Foxit PhantomPDF < 10.1.9 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.9. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when...

Cisco FXOS Software Unidirectional Link Detection Command Injection (cisco-sa-fxos-cmdinj-TxcLNZNH)

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient input validation of...

Rocky Linux 8 : curl (RLSA-2022:6159)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6159 advisory. - curl 7.84.0 supports chained HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with differen...