CBL Mariner 2.0 Security Update: cmake / curl / mysql (CVE-2024-8096)

The version of cmake / curl / mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8096 advisory. - When curl is told to use the Certificate Status Request TLS extension, often referred to as OCS...

Photon OS 5.0: Python3 PHSA-2024-5.0-0386

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0386. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fortinet FortiManager Missing Authentication (FG-IR-24-423)

The remote host is running a version of FortiManager that is prior to either 6.2.13, 6.4.15, 7.0.13, 7.2.8, 7.4.5 or 7.6.1. It is, therefore, affected by a missing authentication vulnerability in FortiManager fgfmd daemon may allow a remote unauthenticated attacker to execute arbitrary code or...

Fedora 40 : suricata (2024-8b08786765)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8b08786765 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21236)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21236 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21157)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21157 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21142)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21142 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported...

Photon OS 4.0: Linux PHSA-2024-4.0-0703

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0703. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens SIMATIC S7-1500 CPUs Authentication Bypass Using an Alternate Path or Channel (CVE-2024-46887)

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum...

Google Chrome < 130.0.6723.70 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.70. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop22 advisory. - Inappropriate implementation in Extensions. CVE-2024-10229 - Type Confusio...

Siemens SIMATIC S7-1500 and S7-1200 CPUs URL Redirection to Untrusted Site (CVE-2024-46886)

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted...

October 22, 2024—KB5045594 (OS Build 19045.5073) Preview

None None...

RHEL 6 : odh-operator-container (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - http-proxy-middleware: Denial of Service CVE-2024-21536 Note that Nessus has not tested for this issue but has...

SUSE SLED15: apache2 / apache2-devel / apache2-event / apache2-manual / etc (SUSE-SU-2024:3742-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3742-1 advisory. - CVE-2024-40725: Fixed source code disclosure of local content bsc1228097 Tenable has extracted the...

Dolibarr 16.x < 16.0.5 Database Download

Dolibarr versions 16.x 16.0.5 suffer from an improper access control vulnerability, allowing a remote and unauthenticated attacker to access the target instance contact database, including public and private notes. No source data...

Palo Alto Expedition < 1.2.96 Multiple Vulnerabilties

Palo Alto Expedition versions before 1.2.96 suffer from multiple vulnerabilities: - An unauthenticated OS command Injection vulnerability through the /API/convertCSVtoParquet.php endpoint CVE-2024-9264 - An authenticated OS command injection vulnerability CVE-2024-9464 - An unauthenticated SQL...

Slackware Linux 15.0 openssl Vulnerability (SSA:2024-295-01)

The version of openssl installed on the remote host is prior to 1.1.1zb. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-295-01 advisory. New openssl packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding description bloc...

Adobe Digital Editions < 3.0 (APSB14-03) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 3.0. It is, therefore, affected by a vulnerability as referenced in the APSB14-03 advisory. - Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption...

Adobe After Effects < 16.1.2 (APSB19-31) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 16.1.2. It is, therefore, affected by a vulnerability as referenced in the APSB19-31 advisory. - Adobe After Effects versions 16 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Adobe Creative Cloud < 4.0.0.185 Multiple Vulnerabilities (APSB17-13)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.0.0.185. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-13 advisory. - Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource...