RHEL 8 : java-1.8.0-openjdk (RHSA-2022:0305)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0305 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

SUSE SLES12: python-numpy_1_13_3-gnu-hpc / python-numpy_1_13_3-gnu-hpc-devel / etc (SUSE-SU-2022:0206-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0206-1 advisory. - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArrayNewFromDescrint function of ctors.c bsc1193913. -...

openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2022:0199-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0199-1 advisory. - Mozilla: Iframe sandbox bypass with XSLT CVE-2021-4140 - Mozilla: Race condition when playing audio files CVE-2022-22737 - Mozilla:...

GLSA-202201-01 : Polkit: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-202201-01 Polkit: Local privilege escalation - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as...

SUSE SLED15 / SLES15 Security Update : rust1.55 (SUSE-SU-2022:0171-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0171-1 advisory. - CVE-2022-21658: Fixed race condition in std::fs::removedirall bsc1194767. Tenable has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2022:0178-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0178-1 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead t...

Foxit PDF Editor for Mac < 11.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.1. It is, therefore affected by multiple vulnerabilities: - An out-of-bounds read error exists in Foxit PDF Editor for Mac due to the...

Oracle Linux 8 : httpd:2.4 (ELSA-2022-0258)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0258 advisory. - scoreboard: fix null pointer deference Orabug: 33690670CVE-2021-34798 - fix apescapequote logic Orabug: 33690686CVE-2021-39275 - Resolves: 2035062 -...

RHEL 8 : nodejs:14 (RHSA-2022:0246)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0246 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

SUSE SLES11 Security Update : expat (SUSE-SU-2022:14878-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14878-1 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavio...

openSUSE 15 Security Update : expat (openSUSE-SU-2022:0178-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0178-1 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc...

RHEL 8 : kpatch-patch (RHSA-2022:0231)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0231 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Debian DLA-2893-1 : pillow - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2893 advisory. - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow before 9.0.0 has a buffer...

openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2022:0136-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0136-1 advisory. - Mozilla: Iframe sandbox bypass with XSLT CVE-2021-4140 - Mozilla: Race condition when playing audio files CVE-2022-22737 - Mozilla:...

openSUSE 15 Security Update : python-numpy (openSUSE-SU-2022:0134-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0134-1 advisory. - A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArrayNewFromDescrint function of ctors.c when specifying arrays of large...

Oracle Primavera P6 Enterprise Project Portfolio Management (Jan 2022 CPU)

The version of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory. - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineeri...

RHEL 7 / 8 : OpenShift Container Platform 4.7.41 (RHSA-2022:0114)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0114 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

Serv-U FTP Server < 15.3 Improper Input Validation

According to its banner, the installed version of Serv-U is a version prior to 15.3. It is, therefore, affected by an improper input validation vulnerability. The Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated th...

SUSE SLES12 Security Update : python-numpy (SUSE-SU-2022:0118-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0118-1 advisory. - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArrayNewFromDescrint function of ctors.c bsc1193913. -...

F5 Networks BIG-IP : BIG-IP Client SSL profile vulnerability (K08476614)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.5 / 15.1.4.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K08476614 advisory. - On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL...