Oracle Linux 9 : python-urllib3 (ELSA-2024-6162)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6162 advisory. - Security fix for CVE-2024-37891 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 9 : python3.9 (ELSA-2024-6163)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6163 advisory. - Security fix for CVE-2024-8088 Resolves: RHEL-55968 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Ivanti Virtual Traffic Manager Authentication Bypass

Ivanti Virtual Traffic Manager vTM versions before 22.2R1 and 22.x 22.7R2 suffers from an authentication bypass vulnerability. By exploiting this vulnerability, a remote and unauthenticated attacker can access the administration panel and perform arbitrary modifications on the affected instance. ...

Slackware Linux 15.0 / current seamonkey Vulnerability (SSA:2024-247-02)

The version of seamonkey installed on the remote host is prior to 2.53.19. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-247-02 advisory. New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

Oracle Linux 9 : runc (ELSA-2024-6188)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6188 advisory. - rebuild for CVE-2024-24783 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Laravel Pulse Unrestricted Access

Laravel Pulse is a Laravel package that provides information about application performance. If an attacker gains access to this dashboard, he can retrieve sensitive information, notably from stack traces or endpoints. No source data...

Nginx HTTP API Module Unrestricted Access

Nginx HTTP API Module provide a REST API for accessing various status information, configuring upstream server groups on-the-fly, and managing key-value pairs without the need of reconfiguring nginx. If these endpoints are accessible to an attacker, he can modify the configuration in place and, i...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2024-247-01)

The version of mozilla-firefox installed on the remote host is prior to 115.15.0esr / 128.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-247-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...

Mozilla Firefox ESR < 115.15

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-41 advisory. - The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were...

EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2024-2306)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem...

AlmaLinux 9 : gvisor-tap-vsock (ALSA-2024:6187)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:6187 advisory. golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm CVE-2024-24783 Tenable has extracted the preceding description block direct...

FreeBSD : chromium -- multiple security fixes (26125e09-69ca-11ef-8a0f-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 26125e09-69ca-11ef-8a0f-a8a1599412c6 advisory. Chrome Releases reports: This update includes 4 security fixes: Tenable has extracted the...

Oracle Linux 9 : python3.12 (ELSA-2024-6146)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6146 advisory. - Security fix for CVE-2024-8088 Resolves: RHEL-55964 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Nginx+ Dashboard Unrestricted Access

Nginx Plus is a proprietary solution from F5 built on top of Nginx and featuring a dashboard called "Live Activity Monitoring". When accessible without authentication it may contain sensitives information that can be used by an attacker. No source data...

Gradio Unauthenticated Access

By default, Gradio does not require authentication to access the application. This allows an attacker to access sensitive data. This detection is included in the AI and LLM category. No source data...

Gradio Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Gradio instance on the target application. Gradio is a software to build machine learning apps in Python. This detection is included in the AI and LLM category. No source data...

LiteSpeed Cache Plugin for WordPress < 6.4 Privilege Escalation

The WordPress LiteSpeed Cache Plugin installed on the remote host is affected by an unauthenticated Privilege Escalation. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Laravel Telescope Unrestricted Access

Laravel Telescope provides an overview of requests entering your application, exceptions, log entries, database queries, pending tasks, mail, notifications, cache operations, scheduled tasks, variable flushes and much more. If an attacker gains access to this dashboard, it would be possible to...

EulerOS Virtualization 2.12.0 : mod_http2 (EulerOS-SA-2024-2331)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413...

Ubuntu 14.04 LTS : Drupal vulnerabilities (USN-6981-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6981-2 advisory. USN-6981-1 fixed vulnerabilities in Drupal. This update provides the corresponding updates for Ubuntu 14.04 LTS. Tenable has extracted the preceding...