913 matches found
Fedora 39 : edk2 (2024-a9dead34c5)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9dead34c5 advisory. update to edk2-stable202402 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
GHSA-C5Q2-7R4C-MV6G vulnerabilities
Vulnerabilities for packages: ko, cloudflared, sops, kargo, oauth2-proxy, rekor, spire-server, grpc-health-probe, kots, zarf, temporal-ui-server, fulcio, rabbitmq-messaging-topology-operator, bank-vaults, goreleaser, timestamp-authority, weaviate, caddy, argo-workflows, flux-kustomize-controller,...
Fedora 39 : chromium (2024-9ce64d8940)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9ce64d8940 advisory. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 Tenable has extracted the...
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: nri-mssql, cass-operator-fips, cni-plugins-fips, fulcio-fips, dagger, nri-mysql, temporal-server-fips, kube-logging-operator, cert-exporter-fips, dive, nerdctl, volume-modifier-for-k8s-fips, newrelic-infra-operator, influx, nats-server, prometheus-mysqld-exporter,...
CVE-2024-27101 vulnerabilities
Vulnerabilities for packages: spicedb...
CentOS 9 : libguestfs-winsupport-9.2-1.el9
The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the libguestfs-winsupport-9.2-1.el9 build changelog. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is...
Fedora 38 : moodle (2024-d2f180202f)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2f180202f advisory. Fix for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CentOS 9 : toolbox-0.0.99.3-7.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the toolbox-0.0.99.3-7.el9 build changelog. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP...
CentOS 9 : python3.11-3.11.5-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.11-3.11.5-1.el9 build changelog. - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily...
CentOS 9 : samba-4.18.5-100.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the samba-4.18.5-100.el9 build changelog. - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing NTLM...
CentOS 9 : ruby-3.0.2-155.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ruby-3.0.2-155.el9 build changelog. - Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, whic...
RHEL 9 : firefox (RHSA-2024:0968)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0968 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Fedora 38 : mbedtls (2024-c7f1c839ac)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c7f1c839ac advisory. - Update to 2.28.7 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.7 Security Advisories:...
Ubuntu 20.04 LTS : UltraJSON vulnerabilities (USN-6629-3)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6629-3 advisory. USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Tenable has extracted the preceding...
GHSA-22Q8-GHMQ-63VF vulnerabilities
Vulnerabilities for packages: bat...
GHSA-78XJ-CGH5-2H22 vulnerabilities
Vulnerabilities for packages: sqlpad, lerna, renovate, npm, node-gyp...
CentOS 8 : firefox (CESA-2023:0288)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:0288 advisory. - Mozilla: libusrsctp library out of date CVE-2022-46871 - Mozilla: Fullscreen notification bypass CVE-2022-46877 - Mozilla: Arbitrary file read from G...
GHSA-WR6V-9F75-VH2G vulnerabilities
Vulnerabilities for packages: buildkitd, skaffold, trivy, zot, docker, kubescape, kaniko, conftest, guac, conftest-fips, scorecard...