60162 matches found
Fedora 40 : qt6-qtbase (2024-9bf3ff4133)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-9bf3ff4133 advisory. Fix CVE-2024-39936. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...
CBL Mariner 2.0 Security Update: nano (CVE-2024-5742)
The version of nano installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5742 advisory. - A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary...
The Stark Truth Behind the Resurgence of Russia’s Fin7
The Russia-based cybercrime group dubbed "Fin7," known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to life in 2024 -- setting up thousands o...
Wireshark 4.2.x < 4.2.6 A Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 4.2.6. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.6 advisory. - The SPRT dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire ...
AlmaLinux 9 : gvisor-tap-vsock (ALSA-2024:4379)
The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:4379 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block directly from...
Security Update for Microsoft .NET Core SDK (July 2024)
The version of .NET Core SDK installed on the remote host is 8.x prior to 8.0.7. It is, therefore, affected by remote code execution vulnerability as referenced in the July 2024 advisory: - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-35264 - .NET, .NET Framework, and Visua...
Adobe Premiere Pro < 23.6.7 / 24.0.0 < 24.5.0 Arbitrary code execution (APSB24-46) (macOS)
The version of Adobe Premiere Pro installed on the remote macOS host is prior to 23.6.7, 24.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB24-46 advisory. - Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that...
Juniper Junos OS Vulnerability (JSA82991)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82991 advisory. - An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based,...
SUSE SLES15 Security Update : kernel (Live Patch 43 for SLE 15 SP2) (SUSE-SU-2024:2341-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2341-1 advisory. This update for the Linux Kernel 5.3.18-15020024172 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed...
AlmaLinux 8 : libreswan (ALSA-2024:4376)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:4376 advisory. libreswan: IKEv1 default AH/ESP responder can crash and restart CVE-2024-3652 Tenable has extracted the preceding description block directly from the AlmaLinux...
Adobe InDesign < 18.5.3 / 19.0 < 19.4.0 Multiple Vulnerabilities (APSB24-48)
The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.3, 19.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-48 advisory. - InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow...
GLSA-202407-23 : LIVE555 Media Server: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202407-23 LIVE555 Media Server: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding...
Juniper Junos OS Vulnerability (JSA82993)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82993 advisory. - An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an unauthenticated, network-based...
Microsoft Azure Network Watcher VM Extension < 1.4.3320.1 Elevation of Privilege (CVE-2024-35261)
The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3320.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the...
Adobe Bridge 13.x < 13.0.8 / 14.x < 14.1.1 Multiple Vulnerabilities (APSB24-51)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.8 or 14.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-51 advisory. - Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or...
Juniper Junos OS Vulnerability (JSA82982)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82982 advisory. - A Heap-based Buffer Overflow vulnerability in the telemetry sensor process sensord of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E causes a stea...
Microsoft Azure Kinect SDK < 1.4.2 Remote Code Execution (July 2024)
The version of Microsoft Azure Kinect SDK installed on the remote host is prior to 1.4.2. It is, therefore, affected by an undisclosed remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Fedora 40 : firefox (2024-f9e8f7d3a7)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f9e8f7d3a7 advisory. - Updated to latest upstream 128.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...
Adobe Bridge 13.x < 13.0.8 / 14.x < 14.1.1 Multiple Vulnerabilities (APSB24-51)
The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.8 or 14.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-51 advisory. - Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound...