Security Updates for Microsoft SQL Server (September 2024)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CBL Mariner 2.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40549)

The version of shim / shim-unsigned-aarch64 / shim-unsigned-x64 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40549 advisory. - An out-of-bounds read flaw was found in Shim due to the lack of...

EulerOS 2.0 SP10 : libldb (EulerOS-SA-2024-2421)

According to the versions of the libldb package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670 Tenable has extracted the preceding description block directly from the EulerOS libl...

CBL Mariner 2.0 Security Update: frr (CVE-2024-44070)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44070 advisory. - An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual...

Photon OS 5.0: Vim PHSA-2024-5.0-0371

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0371. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20694...

Photon OS 4.0: Linux PHSA-2024-4.0-0687

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0687. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 40 : bluez / iwd / libell (2024-223428e702)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-223428e702 advisory. libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue wit...

Microsoft Power Automate For Desktop Installed (Windows)

Binary data microsoftpowerautomatefordesktopinstalled.nbin...

Photon OS 5.0: Linux PHSA-2024-5.0-0370

An update of the linux package has been released. File data PhotonOSPHSA-2024-50-0370linux.nasl...

AI/LLM Read.AI Detection

Binary data 701480.prm...

Zyxel NAS Web Console Detection

Binary data zyxelnaswebconsoledetect.nbin...

WordPress Plugin 'LiteSpeed Cache' < 6.5.0.1. Unauthenticated Account Takeover

The WordPress application running on the remote host has a version of the 'LiteSpeed Cache' plugin that is prior to 6.5.0.1. It is, therefore, affected by an unauthenticated account takeover vulnerability. The plugin suffers from an unauthenticated account takeover vulnerability which allows any...

MLflow Detection

Binary data pythonmlflowdetect.nbin...

Fedora 40 : aardvark-dns (2024-141d029304)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-141d029304 advisory. Security fix for CVE-2024-8418 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

NewStart CGSL MAIN 6.02 : libksba Vulnerability (NS-SA-2024-0050)

The remote NewStart CGSL host, running version MAIN 6.02, has libksba packages installed that are affected by a vulnerability: - A vulnerability was found in the Libksba library, due to an integer overflow within the CRL's signature parser. This issue can be exploited remotely for code execution ...

KB5043138: Windows Server 2012 R2 Security Update (September 2024)

The remote Windows host is missing security update 5043138. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows Remote Desktop Licensing...

KB5043064: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5043064. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability CVE-2024-38240 - Windows TCP/IP Remote...

KB5043051: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2024)

The remote Windows host is missing security update 5043051. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows Remote Desktop Licensing...

KB5043092: Windows Server 2008 R2 Security Update (September 2024)

The remote Windows host is missing security update 5043092. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows Remote Desktop Licensing...

KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows...