Apache Tomcat 10.1.0.M1 < 10.1.19 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.19. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.19security-10 advisory. - Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for...

Fedora 38 : xen (2024-0da80aa623)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0da80aa623 advisory. x86: shadow stack vs exceptions from emulation stubs - XSA-451, CVE-2023-46841 2266326 Tenable has extracted the preceding description block directl...

Fedora 39 : python-fastapi / python-multipart (2024-2e802cdb4b)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-2e802cdb4b advisory. python-multipart 0.0.7 2024-02-03 Refactor header option parser to use the standard library instead of a custom RegEx 75. Fixes a denial of service...

SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2024:0840-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0840-1 advisory. - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file bsc1219243. Tenable has extracted the preceding...

SUSE SLES15: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2024:0831-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0831-1 advisory. - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file bsc1219243. Tenable has extracted the...

Rocky Linux 8 : edk2 (RLSA-2024:1063)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1063 advisory. - EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be...

Ubuntu 23.10 : Rack vulnerabilities (USN-6689-1)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6689-1 advisory. It was discovered that Rack incorrectly parse some headers. An attacker could possibly use this issue to cause a denial of service. CVE-2023-27539,...

Amazon Linux 2 : microcode_ctl (ALAS-2024-2491)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2491 advisory. Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized...

Adobe Bridge 13.x < 13.0.6 / 14.x < 14.0.2 Multiple Vulnerabilities (APSB24-15)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.6 or 14.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-15 advisory. - Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerabilit...

KB5035919: Windows Server 2008 R2 Security Update (March 2024)

The remote Windows host is missing security update 5035919. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166 - Windows USB Hub...

Adobe Bridge 13.x < 13.0.6 / 14.x < 14.0.2 Multiple Vulnerabilities (APSB24-15)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.6 or 14.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-15 advisory. - Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that cou...

Rocky Linux 8 : postgresql:13 (RLSA-2024:0975)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:0975 advisory. - Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer...

Fortinet Fortigate Authorization bypass in SSLVPN bookmarks (FG-IR-24-013)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-013 advisory. - An authorization bypass through user-controlled key vulnerability CWE-639 in FortiOS version 7.4.0 through 7.4.1, 7.2.0...

RHEL 9 : kernel live patch module (RHSA-2024:1253)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1253 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Rocky Linux 9 : postgresql:15 (RLSA-2024:0950)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:0950 advisory. - Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer...

Security Updates for Microsoft Dynamics 365 (on-premises) (March 2024)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting vulnerability. An attacker can spoof a session to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has instead relied...

KB5035853: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (March 2024)

The remote Windows host is missing security update 5035853. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166 - Windows USB Hub...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12208)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12208 advisory. - netfilter: nftables: check if catch-all set element is active in next generation Pablo Neira Ayuso Orabug: 36250951 CVE-2024-1085 Tenable has extracted t...

KB5035933: Windows Server 2008 Security Update (March 2024)

The remote Windows host is missing security update 5035933. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166 - Windows USB Hub...

Adobe Premiere Pro < 23.6.4 / 24.0.0 < 24.2.1 Multiple Arbitrary code execution (APSB24-12)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.4, 24.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-12 advisory. - Premiere Pro versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds write vulnerability...