CVE-2024-3838 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-21049 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: tkn, ko, melange, policy-controller-fips, slsa-verifier, neuvector-sigstore-interface, tekton-chains-fips, policy-controller, spire-server, tkn-fips, apko, falcoctl, wolfictl, flux-source-controller, falcoctl-fips, zarf, goreleaser, tekton-chains, kubescape, zot,...

GHSA-J5VM-7QCC-2WWG vulnerabilities

Vulnerabilities for packages: kots...

GHSA-RHH4-RH7C-7R5V vulnerabilities

Vulnerabilities for packages: kubescape, wolfictl, gotenberg, filebrowser, kots, chainctl, zarf, terragrunt, mattermost-fips, vault, nuclei, k9s...

CVE-2024-2466 vulnerabilities

Vulnerabilities for packages: curl...

RHEL 8 : thunderbird (RHSA-2024:1496)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1496 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.9.0. Security Fixes: nss:...

CVE-2024-29944 vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: tez, celeborn, cassandra-reaper, druid, trino...

Fedora 39 : opensc (2024-6460a03e29)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6460a03e29 advisory. New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454 Tenable has extracted the preceding description block directly from the...

Fedora 39 : edk2 (2024-a9dead34c5)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a9dead34c5 advisory. update to edk2-stable202402 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: terragrunt, gomplate, kots, skopeo, step-ca, kubernetes-dashboard, goreleaser, policy-controller, apko, sops, oauth2-proxy, sigstore-scaffolding, cloudflared, temporal-ui-server, zot, flux-kustomize-controller, guac, melange, grpc-health-probe, aactl, kargo, dgraph,...

Fedora 39 : chromium (2024-9ce64d8940)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9ce64d8940 advisory. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 Tenable has extracted the...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: k3d, velero, nats-server, prometheus-adapter-fips, vite, dockerize, aws-load-balancer-controller, vt-cli, configmap-reload-fips, haproxy-ingress, aws-flb-kinesis, cert-exporter-fips, nats, cluster-proportional-autoscaler, nri-nginx, envoy-ratelimit,...

CVE-2024-27101 vulnerabilities

Vulnerabilities for packages: spicedb...

CentOS 9 : python3.11-3.11.5-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.11-3.11.5-1.el9 build changelog. - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily...

CentOS 9 : toolbox-0.0.99.3-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the toolbox-0.0.99.3-7.el9 build changelog. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP...

CentOS 9 : samba-4.18.5-100.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the samba-4.18.5-100.el9 build changelog. - An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauthcrap.c. When performing NTLM...

CentOS 9 : libguestfs-winsupport-9.2-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the libguestfs-winsupport-9.2-1.el9 build changelog. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is...

CentOS 9 : ruby-3.0.2-155.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ruby-3.0.2-155.el9 build changelog. - Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, whic...