24839 matches found
Tenable Security Center Multiple Vulnerabilities (TNS-2023-25)
According to its self-reported version, the Tenable Security Center running on the remote host is . It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-25 advisory. - Tenable Security Center leverages third-party software to help provide underlying functionality...
SUSE-SU-2023:3339-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853...
SUSE-SU-2023:3338-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853...
ICONICS and Mitsubishi Electric Products
1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: ICONICS, Mitsubishi Electric Equipment: ICONICS Product Suite Vulnerabilities: Buffer Overflow, Out-of-Bounds Read, Observable Timing Discrepancy, Double Free, and NULL Pointer Dereference 2. RISK EVALUATION Successful...
[SECURITY] [DLA 3530-1] openssl security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3530-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 15, 2023 https://wiki.debian.org/LTS -...
AudioCodes VoIP Phones Hardcoded Key
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2022-054 Product: AudioCodes VoIP Phones Manufacturer: AudioCodes Ltd. Affected Versions: Firmware Versions = 3.4.8.M4 Tested Versions: Firmware Version 3.4.4.1000 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-321 Ris...
Debian: Security Advisory (DLA-3530-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-4799 · Splunk · Splunk Enterprise
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.2.12 Splunk Enterprise versions prior to 9.0.6 Splunk Enterprise versions prior to 9.1.1 Description: The issue is related to the incorrect initialization of a resource when handling the OPENSSLDIR value ...
Debian dla-3530 : libssl-dev - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3530 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3530-1 [email protected]...
[R1] Sensor Proxy Version 1.0.8 Fixes Multiple Vulnerabilities
R1 Sensor Proxy Version 1.0.8 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 08/15/2023 - 15:13 Sensor Proxy leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been ma...
Oracle Linux 8 : nodejs:16 (ELSA-2023-4537)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4537 advisory. - Rebase to 16.20.1 Resolves: rhbz2188289 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 Tenable has extracted the preceding...
SUSE SLES12 Security Update : nodejs14 (SUSE-SU-2023:3306-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3306-1 advisory. - CVE-2023-32002: Fixed permissions policies bypass via Module.load bsc1214150. - CVE-2023-32006: Fixed permissions policies...
SUSE SLES12: libopenssl-devel / libopenssl1_0_0 / libopenssl1_0_0-32bit / etc (SUSE-SU-2023:3308-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3308-1 advisory. - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853 Tenable has extracted the preceding...
DLA-3530-1 openssl - security update
Bulletin has no description...
SUSE-SU-2023:3308-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853...
Vulnerabilities fixed in Python
Vulnerabilities have been fixed in Python. In addition to the vulnerabilities in OpenSSL, for which the NCSC has published previous security advisories published, a vulnerability has also been fixed in the urllib.parse component. Because proper input validation does not take place, it is possible...
Important Photon OS Security Update - PHSA-2023-5.0-91-0070
Updates of 'vim', 'openssl' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2023-4.0-0450
Updates of 'postgresql13', 'postgresql14', 'vim', 'openssl' packages of Photon OS have been released...
SUSE: Security Advisory (SUSE-SU-2023:3308-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...