Fedora 37 : python-virtualbmc (2022-471e14677d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-471e14677d advisory. Security fix for CVE-2022-44020 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 41 : mingw-qt5-qt3d / mingw-qt5-qtactiveqt / mingw-qt5-qtbase / etc (2024-02ccd4daed)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-02ccd4daed advisory. Update to qt-5.15.12. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 37 : mingw-binutils (2022-667ee398b1)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-667ee398b1 advisory. Backport fixes for CVE-2021-3826 and CVE-2022-38533. Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 37 : libksba (2022-0002284730)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-0002284730 advisory. New upstream release fixing CVE-2022-3515 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Fedora 37 : android-tools (2022-6716cd0da2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6716cd0da2 advisory. Update to 33.0.3p1 Security fix for CVE-2022-20128 CVE-2022-3168 Tenable has extracted the preceding description block directly from the Fedora...

Fedora 37 : snakeyaml (2022-c01dd659fa)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c01dd659fa advisory. Security fix for CVE-2022-41854 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 41 : firefox (2024-d85494e836)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d85494e836 advisory. - Updated to latest upstream 131.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 39 : mingw-expat (2024-7427eaacd8)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7427eaacd8 advisory. Backport fix for CVE-2024-50602. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2024-48510

creationtimestamp| type| source ---|---|--- 2024-11-13 14:53:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113476213133846607 2024-11-13 17:13:36+00:00| seen| https://t.me/cvedetector/10825 2025-02-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-...

CVE-2024-34784

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-34780

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-32841

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

Ubuntu: Security Advisory (USN-7105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12813)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12813 advisory. - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37137548 CVE-2024-49863 - mm/hugetlb: fix DEBUGLOCKSWARNON1 when...

Fedora 40 : golang-github-nvidia-container-toolkit (2024-8c218846ee)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8c218846ee advisory. Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch Tenable has extracted the preceding descriptio...

Security Updates for Microsoft Visual Studio Products (November 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to a .NET vulnerable webapp or loading a specially...

Fedora 40 : chromium (2024-011c4d53e5)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-011c4d53e5 advisory. Update to 130.0.6723.116 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Photon OS 3.0: Curl PHSA-2024-3.0-0802

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Vulnerabilities fixed in Microsoft SQL Server

Microsoft has fixed vulnerabilities in SQL Server. A malicious person could exploit the vulnerabilities to execute arbitrary SQL code on the database environment. With the exception of the vulnerabilities marked CVE-2024-49021 and CVE-2024-49043, the vulnerabilities are in the SQL Native Client...

CVE-2024-48997

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 20:41:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113471918018579543 2026-07-04 11:37:06+00:00| seen|...