CBL Mariner 2.0 Security Update: mysql (CVE-2024-20965)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20965 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-20985)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20985 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: UDF. Supported versions that are...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-20967)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20967 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions...

CBL Mariner 2.0 Security Update: nano (CVE-2024-5742)

The version of nano installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5742 advisory. - A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary...

AlmaLinux 9 : dotnet8.0 (ALSA-2024:4450)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4450 advisory. dotnet: DoS in System.Text.Json CVE-2024-30105 dotnet: DoS in ASP.NET Core 8 CVE-2024-35264 dotnet: DoS when parsing X.509 Content and ObjectIdentifiers...

Security Update for Microsoft .NET Core SDK (July 2024)

The version of .NET Core SDK installed on the remote host is 8.x prior to 8.0.7. It is, therefore, affected by remote code execution vulnerability as referenced in the July 2024 advisory: - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-35264 - .NET, .NET Framework, and Visua...

Juniper Junos OS Vulnerability (JSA82991)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82991 advisory. - An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based,...

Oracle Linux 9 : openssh (ELSA-2024-4457)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4457 advisory. 8.7p1-38.0.2.4 - Possible remote code execution due to a race condition CVE-2024-6409 Resolves: RHEL-45741 Tenable has extracted the preceding description block...

Wireshark 4.2.x < 4.2.6 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.2.6. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.6 advisory. - The SPRT dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire ...

SUSE SLES15: freeradius-server / freeradius-server-devel / etc (SUSE-SU-2024:2367-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2367-1 advisory. - CVE-2024-3596: Fixed chosen-prefix collision attack against MD5 bsc1223414. Tenable has extracted the preceding description block directly...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2024-192-01)

The version of mozilla-firefox installed on the remote host is prior to 115.13.0esr / 128.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-192-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...

Juniper Junos OS Vulnerability (JSA83023)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83023 advisory. - An Improper Neutralization of Data within XPath Expressions 'XPath Injection' vulnerability in J-Web shipped with Juniper Networks Junos OS allows an unauthenticated,...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SLE 15 SP2) (SUSE-SU-2024:2341-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2341-1 advisory. This update for the Linux Kernel 5.3.18-15020024172 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed...

Juniper Junos OS Vulnerability (JSA82989)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82989 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis management daemon chassisd of Juniper Networks Junos OS allows an unauthenticated,...

Oracle Linux 8 : dotnet8.0 (ELSA-2024-4451)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4451 advisory. 8.0.107-1.0.1 - Add support for Oracle Linux 8.0.107-1 - Update to .NET SDK 8.0.107 and Runtime 8.0.7 - Resolves: RHEL-45322 Tenable has extracted the...

Juniper Junos OS Vulnerability (JSA83020)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83020 advisory. - An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjace...

Fortinet Fortigate XSS vulnerability in SSL VPN web UI (FG-IR-23-485)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-485 advisory. - The vulnerability exists due to insufficient sanitization of user-supplied data in SSL VPN web UI. A remote attacker can...

RHEL 8 : kernel (RHSA-2024:4447)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4447 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: TIPC message reassembly...

Adobe Bridge 13.x < 13.0.8 / 14.x < 14.1.1 Multiple Vulnerabilities (APSB24-51)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.8 or 14.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-51 advisory. - Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound...

Oracle Linux 8 : dotnet6.0 (ELSA-2024-4438)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4438 advisory. 6.0.132-1.0.1 - Add support for Oracle Linux 6.0.132-1 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45319 Tenable has extracted the precedin...