Fedora 33 : perl-Net-Netmask (2021-be62be8c7c)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-be62be8c7c advisory. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, whi...

Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (April 2021)

The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by multiple vulnerabilities. An attacker can exploit these to either perform actions with the privileges of another user or disclose sensitive information. Note all systems require...

Cisco Unified Communications Manager Information Disclosure (cisco-sa-cucm-inf-disc-wCxZNjL2)

According to its self-reported version, the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME are affected by information disclosure vulnerability due to improper inclusion of sensitive information in downloadable...

Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability (cisco-sa-cucm-selfcare-VRWWWHgE)

According to its self-reported version, the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME is affected by authorization bypass vulnerability due to insufficient validation of user-supplied data...

Citrix Hypervisor <= 8.2 LTSR DoS (CTX306565)

The version of Citrix Hypervisor formerly Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by denial of service vulnerabilities. - A local attacker with the ability to execute privileged mode code in a guest machine can perform a denial of servi...

Security Updates for Microsoft Visual Studio Products (April 2021)

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the multiple vulnerabilities, including the following: - A privilege escalation vulnerability exists in Microsoft Visual Studio's installer component. An authenticated, local attacker can exploit thi...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-4911-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4911-1 advisory. It was discovered that the Nouveau GPU driver in the Linux kernel did not properly handle error conditions in some situations. A local attacker could use...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9057)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9057 advisory. - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492109 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulic...

Oracle Linux 7 : qemu (ELSA-2021-9109)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9109 advisory. - 9pfs: Fully restart unreclaim loop CVE-2021-20181 Greg Kurz Orabug: 32441198 CVE-2021-20181 - ide: atapi: check logical block address and read size...

RHEL 8 : thunderbird (RHSA-2021:1193)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1193 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.1. Security Fixes: Mozilla: ...

Oracle Linux 7 : qemu (ELSA-2021-9104)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9104 advisory. - 9pfs: Fully restart unreclaim loop CVE-2021-20181 Greg Kurz Orabug: 32441198 CVE-2021-20181 - ide: atapi: check logical block address and read size...

RHEL 8 : thunderbird (RHSA-2021:1190)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1190 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.1. Security Fixes: Mozilla: ...

RHEL 7 / 8 : OpenShift Container Platform 4.5.37 (RHSA-2021:1016)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1016 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9172)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9172 advisory. - Xen/gnttab: handle p2m update errors on a per-slot basis Jan Beulich Orabug: 32651477 CVE-2021-28038 - scsi: iscsi: Verify lengths on passthrough PDU...

ManageEngine AssentExplorer < 6.8 Unauthenticated Stored XSS

A stored cross-site scripting XSS vulnerability exists in the XML processing logic of asset discovery. By sending a crafted HTTP POST request to /discoveryServlet/WsDiscoveryServlet, a remote, unauthenticated attacker can create an asset containing malicious JavaScript. When an administrator view...

Apache Tomcat 7.0.0 < 7.0.107

The version of Tomcat installed on the remote host is prior to 7.0.107. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.107security-7 advisory. - When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 t...

Tenable.sc 5.16.0 / 5.17.0 OpenSSL DoS (TNS-2021-06)

According to its self-reported version, the Tenable.sc application installed on the remote host is version 5.16.0 or 5.17.0 and affected by the following OpenSSL denial of service vulnerability: - An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from...

RHEL 7 : kernel (RHSA-2021:1071)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1071 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: out-of-bounds read in libiscsi...

Cisco Firepower Management Center Software Open Redirect (cisco-sa-fmc-redirect-NYDuSEQn)

According to its self-reported version, the web-based management interface of Cisco Firepower Management Center FMC Software is affected by an open redirect vulnerability due to improper input validation of the parameters of an HTTP request. An unauthenticated, remote attacker can exploit this by...

Amazon Linux AMI : tomcat7 (ALAS-2021-1493)

The version of tomcat7 installed on the remote host is prior to 7.0.108-1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1493 advisory. A deserialization flaw was discovered in Apache Tomcat's use of a FileStore. Under specific circumstances, an attacker...