Google Chrome < 124.0.6367.207 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 124.0.6367.207. It is, therefore, affected by a vulnerability as referenced in the 202405stable-channel-update-for-desktop13 advisory. - Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote...

Amazon Linux 2023 : ecs-init (ALAS2023-2024-619)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-619 advisory. A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can...

Amazon Linux 2023 : flatpak, flatpak-devel, flatpak-libs (ALAS2023-2024-611)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-611 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could...

Amazon Linux 2023 : cni-plugins (ALAS2023-2024-618)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-618 advisory. A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12378)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12378 advisory. - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36466544 CVE-2024-1086 Tenable has extracted the preceding description blo...

GLSA-202405-33 : PoDoFo: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-33 PoDoFo: Multiple Vulnerabilities - Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted. CVE-2023-31566 - Podofo v0.10.0 was discovered to contain a hea...

GLSA-202405-30 : Rebar3: Command Injection

The remote host is affected by the vulnerability described in GLSA-202405-30 Rebar3: Command Injection - Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification. CVE-2020-13802 Note that Nessus has not tested for this issue but h...

GLSA-202405-31 : Kubelet: Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202405-31 Kubelet: Privilege Escalation - A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernet...

RHEL 6 : python-rtslib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-rtslib: weak permissions for /etc/target/saveconfig.json CVE-2020-14019 Note that Nessus has not tested for...

RHEL 6 : opencryptoki (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - opencryptoki: timing side-channel in handling of RSA PKCS1 v1.5 padded ciphertexts Marvin CVE-2024-0914 Note that...

RHEL 6 : bluetooth (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - bluetooth: Method Confusion Pairing Vulnerability in LE Secure Connections and BR/EDR Secure Simple Pairing...

RHEL 6 : ctags (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ctags: arbitrary command execution via a tag file with a crafted filename CVE-2022-4515 Note that Nessus has not...

RHEL 7 : python-tornado (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations CVE-2023-28370 Note...

RHEL 8 : jq (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jq: stack exhaustion via jvdumpterm function CVE-2016-4074 Note that Nessus has not tested for this issue but has...

RHEL 8 : ppp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ppp: improper validation of array index of the component pppdump CVE-2022-4603 Note that Nessus has not tested for...

RHEL 9 : ppp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ppp: improper validation of array index of the component pppdump CVE-2022-4603 Note that Nessus has not tested for...

RHEL 7 : perl-crypt-openssl-rsa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-Crypt-OpenSSL-RSA: side-channel attack in PKCS1 v1.5 padding mode Marvin Attack CVE-2024-2467 Note that Nessus...

RHEL 7 : npmjs-url-parse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - npmjs-url-parse: Improper validation of protocol of the returned URL CVE-2020-8124 Note that Nessus has not tested...

RHEL 6 : xmlgraphics-commons (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xmlgraphics-commons: SSRF due to improper input validation by the XMPParser CVE-2020-11988 Note that Nessus has not...

RHEL 7 : json-c,_libfastjson (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file CVE-2020-12762 Note that Nessus...