NewStart CGSL CORE 5.05 / MAIN 5.05 : mod_auth_openidc Multiple Vulnerabilities (NS-SA-2021-0164)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has modauthopenidc packages installed that are affected by multiple vulnerabilities: - A flaw was found in modauthopenidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to...

Ubuntu 16.04 ESM : MySQL vulnerabilities (USN-5123-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5123-2 advisory. USN-5123-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the precedin...

Adobe Animate 22.x < 22.0.0 Multiple Vulnerabilities (APSB21-105)

The version of Adobe Animate installed on the remote Windows host is prior to 22.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-105 advisory. - Adobe Animate version 21.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result ...

Adobe Photoshop 22.x < 22.5.2 Multiple Vulnerabilities (APSB21-109)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-109 advisory. - Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location After End of...

Oracle GoldenGate (Oct 2021 CPU)

The All Supported Versions versions of GoldenGate installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory. - Vulnerability in Oracle GoldenGate component: Install Dell BSAFE Crypto-J. The supported version that is affected is Prior to...

RHEL 7 : rh-redis5-redis (RHSA-2021:3947)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3947 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets...

Cisco Integrated Management Controller GUI DoS (cisco-sa-imc-gui-dos-TZjrFyZh)

According to its self-reported version, Cisco Integrated Management Controller is affected by a denial of service DoS vulnerability in its web-based management interface due to insufficient validation of user-supplied input. An unauthenticated, remote attacker can exploit this issue, by sending...

openSUSE 15 Security Update : flatpak (openSUSE-SU-2021:3472-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3472-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatp...

Oracle WebCenter Portal RCE (Oct 2021 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the October 2021 Critical Patch Update CPU. It is, therefore, affected by a vulnerability in the Discussion Forums XStream component that is easily exploitable by a remote, low privileged attacker...

openSUSE 15 Security Update : ssh-audit (openSUSE-SU-2021:1390-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1390-1 advisory. - OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the...

RHEL 7 : java-11-openjdk (RHSA-2021:3892)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3892 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

PHP 8.0.x < 8.0.12

The version of PHP installed on the remote host is prior to 8.0.12. It is, therefore, affected by a vulnerability as referenced in the Version 8.0.12 advisory. - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM...

SUSE SLED15: libpython2_7-1_0 / python / python-base / python-curses / etc (SUSE-SU-2021:3489-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3489-1 advisory. - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in...

Ubuntu 16.04 ESM : strongSwan vulnerability (USN-5111-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5111-2 advisory. USN-5111-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

SUSE SLES12: libblkid1 / libblkid1-32bit / libfdisk1 / libmount1 / etc (SUSE-SU-2021:3463-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3463-1 advisory. - CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in getsemelements. bsc1188921 - Prevent outdated pam files...

openSUSE 15 Security Update : strongswan (openSUSE-SU-2021:3467-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3467-1 advisory. - The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For...

Cisco IOS XE Software TrustSec CLI Parser DoS (cisco-sa-trustsec-dos-7fuXDR2)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the TrustSec CLI parser that allows an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. ...

openSUSE 15 Security Update : rpm (openSUSE-SU-2021:1366-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1366-1 advisory. - A flaw was found in RPM's hdrblobInit in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds...

openSUSE 15 Security Update : systemd (openSUSE-SU-2021:1370-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1370-1 advisory. - basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and...

SUSE SLED15: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (SUSE-SU-2021:3454-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3454-1 advisory. - CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field bsc1189929. Tenable has extracted the...