60216 matches found
RockyLinux 9 : python-jwcrypto (RLSA-2024:9281)
The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:9281 advisory. JWCrypto: denail of service Via specifically crafted JWE CVE-2023-6681 Tenable has extracted the preceding description block directly from the RockyLinux security...
RockyLinux 9 : postfix (RLSA-2024:9243)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9243 advisory. postfix: SMTP smuggling vulnerability CVE-2023-51764 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note th...
RockyLinux 9 : cyrus-imapd (RLSA-2024:9195)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9195 advisory. cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command CVE-2024-34055 Tenable has extracted the preceding description block directl...
AIX : Multiple Vulnerabilities (IJ53757) (deprecated)
The vendor has closed the APAR as a program error. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/12. Advisory states "Closed as program error" and "Removed security issue." include'compat.inc'; if description scriptid232951; scriptversion"1.5";...
RockyLinux 9 : bzip2 (RLSA-2025:0925)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0925 advisory. bzip2: bzip2: Data integrity error when decompressing with data integrity tests fail. CVE-2019-12900 Tenable has extracted the preceding description block directl...
Amazon Linux 2 : kernel (ALASKERNEL-5.4-2025-096)
The version of kernel installed on the remote host is prior to 5.4.290-205.405. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-096 advisory. Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an...
RockyLinux 9 : python3.11-urllib3 (RLSA-2024:11238)
The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:11238 advisory. urllib3: Request body not stripped after redirect from 303 status changes request method to GET CVE-2023-45803 Tenable has extracted the preceding description...
RockyLinux 9 : squid (RLSA-2024:9625)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9625 advisory. squid: Denial of Service processing ESI response content CVE-2024-45802 Tenable has extracted the preceding description block directly from the RockyLinux securit...
Pritunl Client Installed (MacOSX)
Binary data pritunlclientmacosinstalled.nbin...
FlowiseAI Arbitrary File Upload
Flowise is vulnerable to an attack allowing an unauthenticated attacker to upload an arbitrary file. This detection is included in the AI and LLM category. Note that this plugin requires the 'File Upload' assessment option enabled in the scan configuration. No source data...
PHP 8.4.x < 8.4.5 Multiple Vulnerabilities
According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.32, 8.2.x prior to 8.2.28, 8.3.x prior to 8.3.19, or 8.4.x prior to 8.4.5. It is, therefore, affected by multiple vulnerabilities: - libxml streams use wrong content-type header wh...
SEO Automatic Seo Tools Plugin for WordPress Cross-Site Scripting
The WordPress SEO Automatic Seo Tools Plugin installed on the remote host is affected by a Cross-Site Scripting. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813-Scanner CVE-2025-24813 - Apache Tomcat Vulner...
Apache Camel JAR Detection
Binary data apachecameljardetect.nbin...
Microsoft HPC Node Installed (Linux)
Binary data microsofthpcnodenixinstalled.nbin...
Google Chrome Remote Desktop Installed (macOS)
Binary data googlechromeremotedesktopmacinstalled.nbin...
openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0089-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0089-1 advisory. Chromium 134.0.6998.88 stable released 2025-03-11 boo1239216 CVE-2025-1920: Type Confusion in V8 CVE-2025-2135: Type Confusion in V8 CVE-2025-213...
Fedora 41 : ffmpeg (2025-ab5fe60520)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab5fe60520 advisory. Latest maintenance release from 7.1 branch. Changelog: https://github.com/FFmpeg/FFmpeg/blob/n7.1.1/Changelog . Contains backported fix for...