Oracle WebCenter Sites (October 2024 CPU)

The 12.2.1.4.0 versions of WebCenter Sites installed on the remote host are affected by a vulnerability as referenced in the October 2024 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites jose4j. The supported version that i...

SolarWinds Web Help Desk < 12.8.3 HF 3 Java Deserialization RCE

The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF3. It is, therefore, affected by a Java deserialization remote-code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested f...

Oracle WebLogic Server (October 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions tha...

SolarWinds Platform 2024.2.0 < 2024.4 Multiple Vulnerabilities XSS

The version of SolarWinds Platform installed on the remote host is prior to 2024.4. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20244 advisory. - SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation...

JetBrains YouTrack < 2024.3.46677 Improper Access Control

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.46677. It is, therefore, affected by a vulnerability as referenced in the 2024346677 advisory. - In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to dele...

Nagios XI < 2024R1 API Key Security

According to the self-reported version of Nagios XI, the remote host is affected by a vulnerability related to the generation of API keys. Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation randomly-generated, allowing attackers to possibly generate the same se...

CBL Mariner 2.0 Security Update: OpenIPMI (CVE-2024-42934)

The version of OpenIPMI installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42934 advisory. - OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator,...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-43800)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43800 advisory. - serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to...

Fedora 40 : dnsdist (2024-4ffc26d8cb)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4ffc26d8cb advisory. Update to latest upstream Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Remote Desktop client for Windows RCE (October 2024)

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote-code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fedora 39 : python-virtualenv (2024-f7d6b76677)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f7d6b76677 advisory. - Prevent command injection by quoting template strings in activation scripts Tenable has extracted the preceding description block directly from the Fedora...

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2024-8127)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8127 advisory. 1:21.0.5.0.10-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.5.0.10-3 - Sync the copy of the portable specfile with the latest update -...

Oracle MySQL Server 8.0.x < 8.0.40 (January 2025 CPU)

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Packaging Kerberos. Supported versions that are affected are 8.0.39 and...

SUSE Linux Enterprise Server For SAP SEoL (15.5.x)

According to its version, SUSE Linux Enterprise Server For SAP is 15.5.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

SUSE Linux Enterprise Server For SAP SEoL (15.0.x)

According to its version, SUSE Linux Enterprise Server For SAP is 15.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

SUSE Linux Enterprise Server For SAP SEoL (15.1.x)

According to its version, SUSE Linux Enterprise Server For SAP is 15.1.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

Qnap QTS Classic Buffer Overflow (CVE-2023-32968)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

Fedora 40 : pdns-recursor (2024-af0bf62ac6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-af0bf62ac6 advisory. Update to latest upstream Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Qnap QTS Classic Buffer Overflow (CVE-2023-45040)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

Qnap QTS Command Injection (CVE-2020-2492)

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...