SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:3338-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3338-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. Tenable has extracted the preceding descripti...

Rockwell FactoryTalk Batch View < 3.00 Authentication Bypass

The version of Rockwell FactoryTalk Batch View installed on the remote Windows host is prior to 3.00. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could...

Fedora 39 : ruby (2024-2fb325d068)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2fb325d068 advisory. Upgrade to Ruby 3.2.5. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

ClamAV < 0.103.12, 1.0.0 < 1.0.7, 1.1.0 < 1.3.2, 1.4.0 < 1.4.1 DoS

The ClamAV reported version is 103.12, 1.0.x 1.0.7, 1.1.0 x 1.3.2, or 1.4.0 1.4.1 It is, therefore, affected by a Denial of Service vulnerability in the PDF parsing module, where an attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected...

Rockwell FactoryTalk Batch View Installed (Windows)

Binary data rockwellfactorytalkbatchviewinstalled.nbin...

PDF-XChange Editor < 10.4.0.387 Multiple Vulnerabilities

The version of PDF-XChange Editor installed on the remote Windows host is prior to 10.4.0.387. It is, therefore, affected by multiple vulnerabilities: - A specific flaw exists within the parsing of XPS files. The issue results from the lack of proper validation of user-supplied data, which can...

AlmaLinux 9 : expat (ALSA-2024:6754)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6754 advisory. libexpat: Negative Length Parsing Vulnerability in libexpat CVE-2024-45490 libexpat: Integer Overflow or Wraparound CVE-2024-45491 libexpat: integer...

PDF-XChange Editor Installed (Windows)

Binary data pdfxchangeeditorinstalled.nbin...

ClamAV < 0.103.12, 1.0.0 < 1.0.7, 1.1.0 < 1.3.2, 1.4.0 < 1.4.1 System File Corruption

The ClamAV reported version is 103.12, 1.0.x 1.0.7, 1.1.0 x 1.3.2, or 1.4.0 1.4.1 It is, therefore, affected by a vulnerability in the ClamD service module, where an attacker could to corrupt a critical system file by appending ClamD log messages after restart. Note that Nessus has not tested for...

Fedora 39 : frr (2024-2fff2b9a18)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2fff2b9a18 advisory. Fix for CVE-2024-44070 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Microsoft Edge (Chromium) < 129.0.2792.52 (CVE-2025-29806)

The version of Microsoft Edge installed on the remote Windows host is prior to 129.0.2792.52. It is, therefore, affected by a vulnerability as referenced in the March 21, 2025 advisory. - No cwe for this issue in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a...

Oracle Linux 9 : openssl (ELSA-2024-12675)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12675 advisory. 3.0.7-28.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Add FIPS package change: add fips suffix to Release and set Epoch to 10...

Docker Desktop < 4.34.2 Multiple Vulnerabilities

The version of Docker Desktop for Linux is prior to 4.34.2. It is therefore affected by multiple vulnerabilities. - A remote code execution RCE vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. - A remote code...

SUSE SLES15: libpython3_6m1_0 / python3 / python3-base / python3-curses / etc (SUSE-SU-2024:3302-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3302-1 advisory. - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module bsc1228780. - CVE-2024-7592: Fixed Email...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Python vulnerabilities (USN-7015-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7015-2 advisory. USN-7015-1 fixed several vulnerabilities in Python. This update provides one of the corresponding updates for python2...

Docker Desktop < 4.34.2 Multiple Vulnerabilities

The version of Docker Desktop for Linux is prior to 4.34.2. It is therefore affected by multiple vulnerabilities. - A remote code execution RCE vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. - A remote code...

Amazon Linux 2 : microcode_ctl (ALAS-2024-2635)

The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2635 advisory. 2024-10-10: CVE-2024-22374 was added to this advisory. Improper isolation in some IntelR Processors stream cache...

SolarWinds ARM 2024.3.1 Multiple Vulnerabilities (2024-3-1)

The version of SolarWinds ARM installed on the remote host is prior to 2024.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024-3-1 advisory. - SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. ...

Amazon Linux 2 : kernel (ALAS-2024-2633)

The version of kernel installed on the remote host is prior to 4.14.336-257.566. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2633 advisory. 2024-12-05: CVE-2024-26687 was added to this advisory. In the Linux kernel, the following vulnerability has been...

Amazon Linux 2 : ruby (ALAS-2024-2637)

The version of ruby installed on the remote host is prior to 2.0.0.648-36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2637 advisory. A flaw was found in the way the Ruby REXML library parsed XML documents. Parsing a specially crafted XML document using...