AlmaLinux 8 : libuv (ALSA-2021:3075)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:3075 advisory. - Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uvidnatoascii is used to convert strings to ASCII. The pointer p is read and...

AlmaLinux 8 : curl (ALSA-2021:4059)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4059 advisory. - A user can tell curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, t...

AlmaLinux 8 : openssh (ALSA-2021:4368)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4368 advisory. - The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-midd...

AlmaLinux 8 : rpm (ALSA-2021:2574)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:2574 advisory. - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingl...

Rocky Linux 8 : kernel (RLSA-2021:1578)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1578 advisory. - In pfkeydump of afkey.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel wi...

Rocky Linux 8 : GNOME (RLSA-2021:1586)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1586 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS...

AlmaLinux 8 : resource-agents (ALSA-2021:4139)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4139 advisory. - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML...

IBM DB2 9.7 < 9.7 FP11 40985 / 10.1 < 10.1 FP6 40986 / 10.5 < 10.5 FP11 40988 / 11.1 < 11.1.4 FP6 41025 / 11.5 < 11.5.7 Information Disclosure (Windows)

According to its self-reported version number, IBM Db2 is affected by multiple vulnerabilities: - IBM Db2 is affected by an information disclosure vulnerability when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. CVE-2021-20373 - IB...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0030-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0030-1 advisory. - Use after free in Safe Browsing. CVE-2022-0452 - Use after free in Reader Mode. CVE-2022-0453 - Heap buffer overflow in ANGLE...

KB5010403: Windows Server 2008 Security Update (February 2022)

The remote Windows host is missing security update 5010403. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...

KB5010422: Windows 7 and Windows Server 2008 R2 Security Update (February 2022)

The remote Windows host is missing security update 5010422. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21998 - A denial of service DoS vulnerability. An...

KB5010358: Windows 10 LTS 1507 Security Update (February 2022)

The remote Windows host is missing security update 5010358. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...

Adobe Photoshop 22.x < 22.5.5 / 23.x < 23.1.1 Vulnerability (macOS APSB22-08)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 22.5.5/23.1.1. It is, therefore, affected by a vulnerability as referenced in the apsb22-08 advisory. - Adobe Photoshop versions 22.5.4 and earlier and 23.1 and earlier are affected by a buffer overflow...

KB5010354: Windows Server 2022 Security Update (February 2022)

The remote Windows host is missing security update 5010354. It is, therefore, affected by multiple vulnerabilities - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21993, CVE-2022-21998 - A denial of service DoS...

Amazon Linux AMI : kernel (ALAS-2022-1563)

The version of kernel installed on the remote host is prior to 4.14.262-135.489. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1563 advisory. 2025-01-30: CVE-2021-47483 was added to this advisory. 2025-01-30: CVE-2021-47506 was added to this advisory. A fla...

macOS 12.x < 12.2 (HT213054)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.2 Monterey. It is, therefore, affected by multiple vulnerabilities, including the following: - A memory corruption issue in IOMobileFrameBuffer that can lead to arbitrary code execution with kernel privileges due to...

SUSE SLES12 Security Update : kernel (Live Patch 40 for SLE 12 SP3) (SUSE-SU-2022:0328-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0328-1 advisory. This update for the Linux Kernel 4.4.180-94147 fixes several issues. The following security issues were fixed: - CVE-2018-25020:...

Ubuntu 16.04 ESM : Perl DBI module vulnerabilities (USN-5030-2)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5030-2 advisory. USN-5030-1 addressed vulnerabilities in Perl DBI module. This update provides the corresponding updates for Ubuntu 16.04 ESM. Tenable has extracted the...

Ubuntu 16.04 ESM : Graphviz vulnerabilities (USN-5264-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5264-1 advisory. It was discovered that graphviz contains null pointer dereference vulnerabilities. Exploitation via a specially crafted input file can cause a denial of...

Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-smb-mult-vuln-KA9PK6D)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by multiple vulnerabilities: - A vulnerability in the SSL VPN module of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote...