CBL Mariner 2.0 Security Update: kubevirt (CVE-2023-26484)

The version of kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-26484 advisory. - KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicio...

CBL Mariner 2.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40549)

The version of shim / shim-unsigned-aarch64 / shim-unsigned-x64 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40549 advisory. - An out-of-bounds read flaw was found in Shim due to the lack of...

[R1] Nessus Version 10.8.3 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.8.3 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 09/11/2024 - 15:19 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...

[R1] Nessus Version 10.7.6 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.7.6 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 09/11/2024 - 12:57 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...

[R1] Nessus Agent Version 10.7.3 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 10.7.3 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 09/11/2024 - 12:29 Nessus Agent leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions...

QUIC Service Detection

Nessus was able to detect that the remote service supports QUIC by sending a QUIC initial packet and receiving QUIC handshake messages in reply. TRUSTED...

Security Updates for Microsoft Dynamics 365 Business Central (September 2024)

The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a privilege escalation vulnerability. An authenticated, remote attacker can exploit this to gain privileged or administrator access to the system. Note that Nessus has not attempted to...

RHEL 7 : httpd (RHSA-2024:6584)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:6584 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Security issues via?backe...

SUSE SLES12: postgresql13 / postgresql13-contrib / postgresql13-devel / etc (SUSE-SU-2024:3192-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3192-1 advisory. - Upgrade to 13.16 bsc1229013 - CVE-2024-7348: PostgreSQL relation replacement during pgdump executes arbitrary SQL. bsc1229013 Tenable has...

Fedora 40 : wireshark (2024-105eb3026f)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-105eb3026f advisory. New version 4.2.7, fix for CVE-2024-8250 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 40 : bluez / iwd / libell (2024-223428e702)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-223428e702 advisory. libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue wit...

Palo Alto Networks PAN-OS 11.2.x < 11.2.3 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.2.x prior to 11.2.3. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run...

WordPress Plugin 'LiteSpeed Cache' < 6.5.0.1. Unauthenticated Account Takeover

The WordPress application running on the remote host has a version of the 'LiteSpeed Cache' plugin that is prior to 6.5.0.1. It is, therefore, affected by an unauthenticated account takeover vulnerability. The plugin suffers from an unauthenticated account takeover vulnerability which allows any...

Fedora 39 : wireshark (2024-68faaf3451)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-68faaf3451 advisory. New version 4.0.17, fix for CVE-2024-8250 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

KB5043064: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5043064. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability CVE-2024-38240 - Windows TCP/IP Remote...

Adobe Premiere Pro < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-58) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-58 advisory. - Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that...

KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows...

NewStart CGSL MAIN 6.02 : perl-HTTP-Tiny Multiple Vulnerabilities (NS-SA-2024-0058)

The remote NewStart CGSL host, running version MAIN 6.02, has perl-HTTP-Tiny packages installed that are affected by multiple vulnerabilities: - It was found that perl can load modules from the current directory if not found in the module directories, via the @INC path. A local, authenticated...

KB5043051: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2024)

The remote Windows host is missing security update 5043051. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows Remote Desktop Licensing...

KB5043092: Windows Server 2008 R2 Security Update (September 2024)

The remote Windows host is missing security update 5043092. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows Remote Desktop Licensing...