Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12582)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12582 advisory. - net/mlx5e: drop shorter ethernet frames Manjunath Patil Orabug: 36879156 CVE-2024-41090 CVE-2024-41091 Tenable has extracted the preceding...

KB5041782: Windows 10 LTS 1507 Security Update (August 2024)

The remote Windows host is missing security update 5041782. It is, therefore, affected by multiple vulnerabilities - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating a smaller than neede...

SUSE SLED12 / SLES12 Security Update : python-urllib3 (SUSE-SU-2024:2879-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2879-1 advisory. - CVE-2024-37891: Fixed proxy-authorization request header is not stripped during cross-origin redirects bsc1226469...

Oracle Linux 8 : python-urllib3 (ELSA-2024-5309)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-5309 advisory. 1.24.2-8 - Security fix for CVE-2024-37891 Resolves: RHEL-45334 Tenable has extracted the preceding description block directly from the Oracle Linux security...

KB5041580: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2024)

The remote Windows host is missing security update 5041580. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...

FreeBSD : OpenHAB CometVisu addon -- Multiple vulnerabilities (587ed8ac-5957-11ef-854a-001e676bf734)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 587ed8ac-5957-11ef-854a-001e676bf734 advisory. OpenHAB reports: This patch release addresses the following security advisories: All of these are relat...

Fortinet Fortigate Real-time file system integrity checking write protection bypass (FG-IR-24-012)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-012 advisory. - An improper access control vulnerability CWE-284 in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14...

Fedora 40 : python2.7 (2024-4c8a159e6e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4c8a159e6e advisory. Security fix for CVE-2024-6345 in the bundled setuptools wheel. Tenable has extracted the preceding description block directly from the Fedora security...

AlmaLinux 9 : 389-ds-base (ALSA-2024:5192)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:5192 advisory. 389-ds-base: Malformed userPassword hash may cause Denial of Service CVE-2024-5953 389-ds-base: unauthenticated user can trigger a DoS by sending a specif...

KB5041851: Windows Server 2012 Security Update (August 2024)

The remote Windows host is missing security update 5041851. It is, therefore, affected by multiple vulnerabilities - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating a smaller than neede...

Adobe Photoshop 24.x < 24.7.4 / 25.x < 25.11 Vulnerability (macOS APSB24-49)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 24.7.4/25.11. It is, therefore, affected by a vulnerability as referenced in the apsb24-49 advisory. - Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability tha...

KB5041823: Windows Server 2008 R2 Security Update (August 2024)

The remote Windows host is missing security update 5041823. It is, therefore, affected by multiple vulnerabilities - Windows Line Printer Daemon LPD Service Remote Code Execution Vulnerability CVE-2024-38199 - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability...

KB5041850: Windows Server 2008 Security Update (August 2024)

The remote Windows host is missing security update 5041850. It is, therefore, affected by multiple vulnerabilities - Windows Line Printer Daemon LPD Service Remote Code Execution Vulnerability CVE-2024-38199 - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability...

Oracle Linux 8 : edk2 (ELSA-2024-5297)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5297 advisory. - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch RHEL-21854 RHEL-21856 RHEL-40099 - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch...

Fedora 39 : python2.7 (2024-19f696f0ca)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-19f696f0ca advisory. Security fix for CVE-2024-6345 in the bundled setuptools wheel. Tenable has extracted the preceding description block directly from the Fedora security...

Adobe Bridge 13.x < 13.0.9 / 14.x < 14.1.2 Multiple Vulnerabilities (APSB24-59)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.9 or 14.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-59 advisory. - Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerabilit...

KB5041578: Windows 10 version 1809 / Windows Server 2019 Security Update (August 2024)

The remote Windows host is missing security update 5041578. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...

Dell iDRAC Service Module < 5.3.1.0 Multiple Vulnerabilities

Dell iDRAC Service Module version 5.3.0.0 and prior, contains multiple Out-of-bound Write Vulnerabilities. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event. Note that Nessus has not tested for this issue but has instead relied only on the...

Fedora 40 : firefox / nss (2024-7f0a88301b)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-7f0a88301b advisory. Update NSS to 3.103.0 Update to Firefox 129.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 39 : firefox / nss (2024-4fcf85b0ff)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-4fcf85b0ff advisory. Update NSS to 3.103.0 Update to Firefox 129.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...