Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2024-206-02)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.13.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-206-02 advisory. New libxml2 packages are available for Slackware XXX 15.0 and -current to fix a security issue. Tenable has extracted the...

JetBrains TeamCity < 2024.07 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.07. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.07 parameters of the password type could leak into the build log in some specific cases CVE-2024-41824 - In JetBrains...

PT-2024-29568 · Unknown +1 · Openproject +1

Name of the Vulnerable Software and Affected Versions: OpenProject versions prior to 14.3.0 Description: The issue allows an attacker to redirect to a remote host to initiate a phishing attack against an OpenProject user's account by using a forged HOST header in the default configuration of...

AlmaLinux 9 : httpd (ALSA-2024:4726)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4726 advisory. httpd: Improper escaping of output in modrewrite CVE-2024-38475 httpd: Substitution encoding issue in modrewrite CVE-2024-38474 httpd: null pointer...

Oracle MySQL Connectors (Jul 2024 CPU)

The 8.4.0 versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net .NET Core. Supported versions that are affected are...

Fedora 40 : dotnet6.0 (2024-93b1d814a0)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-93b1d814a0 advisory. This is the July 2024 security update for .NET 6. Release Notes - SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.32/6.0.132.md - Runtime...

Photon OS 5.0: Linux PHSA-2024-5.0-0230

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0230. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-2061)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 3.0: Linux PHSA-2022-3.0-0409

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0409. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS 2.0 SP8 : systemd (EulerOS-SA-2024-2061)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they ha...

Amazon Linux 2 : httpd (ALAS-2024-2594)

The version of httpd installed on the remote host is prior to 2.4.61-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2594 advisory. Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sen...

EulerOS 2.0 SP8 : ncurses (EulerOS-SA-2024-2059)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry.CVE-2023-50495 Tenable has extracted the...

Slackware Linux 15.0 mozilla-thunderbird Multiple Vulnerabilities (SSA:2024-205-03)

The version of mozilla-thunderbird installed on the remote host is prior to 115.13.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-205-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 to fix security issues. Tenable has extract...

Amazon Linux 2 : libreswan (ALAS-2024-2596)

The version of libreswan installed on the remote host is prior to 3.25-4.8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2596 advisory. The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. Wh...

Atlassian Confluence 7.19.23 < 7.19.25 / 8.5.x < 8.5.12 / 8.9.x < 8.9.4 (CONFSERVER-96103)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-96103 advisory. - When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory erro...

EulerOS Virtualization 2.10.1 : util-linux (EulerOS-SA-2024-2013)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users...

Oracle Enterprise Manager Cloud Control (Jul 2024 CPU)

The 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Install Apach...

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2024-4573)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4573 advisory. 1:21.0.4.0.7-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.4.0.7-1 - Update to jdk-21.0.4+7 GA - Update release notes to 21.0.4+7 -...

Oracle VM VirtualBox (July 2024 CPU)

The versions of VM VirtualBox installed on the remote host are prior to 7.0.20 and therefore affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2024:2535-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2535-1 advisory. - CVE-2023-28746: Register File Data Sampling XSA-452, bsc1221332 - CVE-2023-46842: HVM hypercalls may trigger Xen bug check XSA-45...