Photon OS 3.0: E2Fsprogs PHSA-2023-3.0-0518

An update of the e2fsprogs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0518. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Hikvision Video Recorders NULL Pointer Dereference (CVE-2024-29947)

There is a NULL pointer dereference vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an attacker may send specially crafted messages to an affected product, causing a process abnormality. This plugin only works with Tenable.ot. Please visit...

Fedora 40 : python3-docs / python3.12 (2024-486cb71423)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-486cb71423 advisory. Update to 3.12.4, fix CVE-2024-4032 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32616)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32616 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Odtypeencodehelper in H5Odtype.c...

Node.js Modules Installed (Windows)

Binary data nodejsmoduleswininstalled.nbin...

Microsoft Azure Migrate Auto Update < 6.1.294.1008 XSS

The version of Microsoft Azure Migrate installed on the remote Windows host is prior to 6.1.294.1008. It is, therefore, affected by a cross-site scripting vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

RHEL 5 : e2fsprogs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - e2fsprogs: Crafted ext4 partition leads to out-of-bounds write CVE-2019-5094 - e2fsprogs: Out-of-bounds...

RHEL 9 : libyang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libyang: NULL pointer dereference via lyspstmtvalidatevalue at lysparsemem.c CVE-2023-26917 Note that Nessus has no...

PT-2022-21617 · Scanner +1 · Scanner +1

Name of the Vulnerable Software and Affected Versions: Scanner affected versions not specified Description: An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH...

Emerson Rx3i Improper Input Validation

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versionsEnd of Life may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service...

MySQL Server Installed (Windows)

Binary data mysqlwininstalled.nbin...

Emerson Deltav Unspecified Vulnerability

The Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1, and DeltaV VE3006 through 10.3.1 and 11.x through 11.3.1 allow remote attackers to cause a denial of service device restart via a crafted packet on 1 TCP port 23, 2 UDP port 161, or 3 TCP port 513. Fil...

Enea Ose Unspecified Vulnerability

The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by...

Yokogawa A2NN30 Node Unit Detection

Binary data 760174.prm...

Kyocera Mita Scanner File Utility 3.3.0.1 File Transfer Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30855/info Kyocera Mita Scanner File Utility is prone to a directory-traversal vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to create and overwrite arbitrary...

Server side request forgery (ssrf)

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to cause a denial of service hang or crash via invalid field length values in a malformed 1 document or 2 request...

CVE-2008-7113

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...

Authorization

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password...

CVE-2008-7112

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to cause a denial of service hang or crash via invalid field length values in a malformed 1 document or 2 request...

Design/Logic Flaw

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...