FreeBSD : znc -- remote code execution vulnerability (8057d198-4d26-11ef-8e64-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8057d198-4d26-11ef-8e64-641c67a117d8 advisory. Mitre reports: In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. Tenable has...

Dify Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Dify instance on the target application. Dify is an open-source LLM app development platform. This detection is included in the AI and LLM category. No source data...

Exiv2 Installed (Linux / Unix)

Binary data exiv2nixinstalled.nbin...

Apple iOS < 17.6 Multiple Vulnerabilities (120909)

Binary data appleios176check.nbin...

Photon OS 3.0: Vim PHSA-2022-3.0-0411

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0411. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20479...

CBL Mariner 2.0 Security Update: python-idna / python-pip / python3 / tensorflow (CVE-2024-3651)

The version of python-idna / python-pip / python3 / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3651 advisory. - A vulnerability was identified in the kjd/idna library, specifically...

CBL Mariner 2.0 Security Update: httpd (CVE-2024-40898)

The version of httpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40898 advisory. - SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTM...

Fedora 40 : darkhttpd (2024-25f8e34407)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-25f8e34407 advisory. - Update to 1.16 fixes rhbz2259096 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Atlassian Bamboo < 9.2.16 / < 9.6.4 File Inclusion (CVE-2024-21687)

The version of Atlassian Bamboo installed on the remote host is prior to 9.2.16 or 9.6.4. It is, therefore, affected by a file inclusion allows an authenticated attacker to get the application to display the contents of a local file, or execute a different files already stored locally on the serv...

Fedora 40 : tinyproxy (2024-aa3631a416)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-aa3631a416 advisory. Update to version 1.11.2 to fix CVE-2023-49606. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Rocky Linux 9 : libndp (RLSA-2024:4636)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:4636 advisory. libndp: buffer overflow in route information length field CVE-2024-5564 Tenable has extracted the preceding description block directly from the Rocky Linux...

OSGeo GeoServer Installed (Linux / Unix)

Binary data osgeogeoservernixinstalled.nbin...

Apache CXF < 3.5.9, 3.6.x < 3.6.4, 4.0.x < 4.0.5 Multiple Vulnerabilities

The version of Apache CXF installed on the remote Windows host is affected by multiple vulnerabilities: - A SSRF vulnerability in WADL service description in versions of Apache CXF before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform SSRF style attacks on REST webservices. The attack only...

Samsung Magician Installed (macOS)

Binary data macossamsungmagicianinstalled.nbin...

Oracle MySQL Cluster (Jul 2024 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.5.34 and prior,...

SUSE SLES15 Security Update : postgresql14 (SUSE-SU-2024:2262-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2262-2 advisory. - Upgrade to 14.12 bsc1224051: - CVE-2024-4317: Restrict visibility of pgstatsext and pgstatsextexprs entries to the table owner. See releas...

National Instruments LabVIEW < 2024 Q3 Multiple Vulnerabilities

The version of National Instruments NI LabVIEW installed on the remote Windows host is affected by multiple vulnerabilities: - An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacke...

Fedora 40 : ruby (2024-93575091aa)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-93575091aa advisory. Upgrade to Ruby 3.3.4. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Spring Framework < 5.3.32 / 6.0.x < 6.0.17 / 6.1.x < 6.1.4 Open Redirect (CVE-2024-22243)

The remote host contains a Spring Framework version is affected by an open redirect vulnerability. Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the parsed URL may be vulnerable to a open...

Fedora 39 : rapidjson (2024-a3c1b2629e)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a3c1b2629e advisory. Fix for CVE-2024-38517. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...