9588 matches found
Fedora: Security Advisory for ansible (FEDORA-2021-4ad7c70d71)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OpenJDK 7 <= 7u281 / 8 <= 8u272 / 11.0.0 <= 11.0.9 / 13.0.0 <= 13.0.5 / 15.0.0 <= 15.0.1 Vulnerability (2021-01-19)
The version of OpenJDK installed on the remote host is prior to 7 = 7u281 / 8 = 8u272 / 11.0.0 = 11.0.9 / 13.0.0 = 13.0.5 / 15.0.0 = 15.0.1. It is, therefore, affected by a vulnerability as referenced in the 2021-01-19 advisory. Please Note: Java CVEs do not always include OpenJDK versions, but a...
OpenJDK 7 <= 7u291 / 8 <= 8u282 / 11.0.0 <= 11.0.10 / 13.0.0 <= 13.0.6 / 15.0.0 <= 15.0.2 / 16.0.0 Multiple Vulnerabilities (2021-04-20)
The version of OpenJDK installed on the remote host is prior to 7 = 7u291 / 8 = 8u282 / 11.0.0 = 11.0.10 / 13.0.0 = 13.0.6 / 15.0.0 = 15.0.2 / 16.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021-04-20 advisory. - Vulnerability in the Java SE, Java SE Embedded,...
Debian DSA-4935-1 : php7.3 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4935 advisory. Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result an SSRF bypass of the FILTERVALIDATEUR...
EulerOS Virtualization for ARM 64 3.0.2.0 : jbigkit (EulerOS-SA-2021-2074)
According to the version of the jbigkit package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting i...
Oracle Linux 8 : python38:3.8 / and / python38-devel:3.8 (ELSA-2021-2583)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2583 advisory. - Rebase to version 5.4.1 to fix CVE-2020-14343 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...
EulerOS Virtualization for ARM 64 3.0.2.0 : bind (EulerOS-SA-2021-2092)
According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In BIND 9.0.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.3-S1 - 9.11.21-S1 of the BIND 9 Supported...
Amazon Linux 2 : httpd (ALAS-2021-1674)
The version of httpd installed on the remote host is prior to 2.4.48-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1674 advisory. A flaw was found in Apache httpd. The modproxywstunnel module tunnels non-upgraded connections. CVE-2019-17567 A flaw was...
EulerOS Virtualization for ARM 64 3.0.6.0 : git (EulerOS-SA-2021-1998)
According to the version of the git packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that...
Huawei EulerOS: Security Advisory for gstreamer-plugins-good (EulerOS-SA-2021-1981)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1993)
According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination...
Photon OS 4.0: Linux PHSA-2021-4.0-0052
An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0052. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...
Photon OS 2.0: Linux PHSA-2021-2.0-0363
An update of the linux package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0363. The text itself is copyright C VMware, Inc...
FreeBSD : gitea -- multiple vulnerabilities (0e561c06-d13a-11eb-92be-0800273f11ea)
The Gitea Team reports for release 1.14.3 : - Encrypt migration credentials at rest 15895 16187 - Only check access tokens if they are likely to be tokens 16164 16171 - Add missing SameSite settings for the ilikegitea cookie 16037 16039 - Fix setting of SameSite on cookies 15989 15991 %NASLMINLEV...
Amazon Linux 2 : systemd, --advisory ALAS2-2021-1647 (ALAS-2021-1647)
The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1647 advisory. It was discovered that systemd is vulnerable to a state injection attack when deserializing the state of a service...
ArubaOS-Switch Multiple Vulnerabilities (ARUBA-PSA-2020-007)
The version of ArubaOS-Switch installed on the remote host is 16.08. prior to version 16.08.0009, 16.09. prior to 16.09.0007 or 16.10. prior to 16.10.0003. It is, therefore, affected by multiple vulnerabilities, as follows: - A vulnerability in the Web Management Interface allows an attacker to...
Amazon Linux 2 : glib2 (ALAS-2021-1655)
The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1655 advisory. An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-b...
Ubuntu 16.04 ESM : OpenEXR vulnerabilities (USN-4996-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4996-2 advisory. USN-4996-1 fixed several vulnerabilities in OpenEXR. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the...
Apache Tomcat 10.0.0.M1 < 10.0.0.M6
The version of Tomcat installed on the remote host is prior to 10.0.0.M6. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.0.0-m6security-10 advisory. - A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 t...
Photon OS 4.0: Go PHSA-2021-4.0-0046
An update of the go package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0046. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...