RHSA-2016:0441 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

RHSA-2016:0212 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Bulletin has no description...

USN-7007-1: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Chenyuan Yang discovered that the USB Gadget subsystem in...

Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

GitLab has fixed vulnerabilities in Enterprise Edition EE and Community Edition CE. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or to grant themselves elevated privileges and perform actions in the context of another user, potentially including users with...

Vulnerabilities fixed in Cisco IOS XR

Cisco has fixed vulnerabilities in IOS XR. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or execute arbitrary code on the vulnerable system. To cause a Denial-of-Service, the malicious party does not need prior authentication. To execute arbitrary code, the...

RHSA-2013:1527 Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

Bulletin has no description...

RHSA-2012:0422 Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

Bulletin has no description...

RHSA-2012:0670 Red Hat Security Advisory: kernel-rt security and bug fix update

Bulletin has no description...

Oracle Linux 7 : httpd (ELSA-2024-4943)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4943 advisory. - Opt-ins for unsafe prefixstat and %3f Orabug: 36904263CVE-2024-38474CVE-2024-38475 Tenable has extracted the preceding description block directly fro...

Microsoft Security Update Validation Report September 2024

Microsoft’s September 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing...

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution

GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. The issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a maximum of 10.0 "An issue was discovered in...

Cisco Releases Security Updates for IOS XR Software

Cisco released security updates to address vulnerabilities in Cisco ISO XR software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates:...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the...

Fedora 39 : vim (2024-055adf8e6f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-055adf8e6f advisory. Security fix for CVE-2024-45306 ---- patchlevel 703 Security fixes for CVE-2024-43374, CVE-2024-43802 Tenable has extracted the preceding descriptio...

Security Updates for Microsoft SQL Server (CVE-2024-43474) (September 2024) (Remote)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An information disclosure vulnerability. An authenticated, remote attacker can exploit this to disclose sensitive database and file information...

Fedora 40 : python3.13 (2024-e887a10dee)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e887a10dee advisory. Python 3.13.0rc2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 39 : wolfssl (2024-b73e44fe9d)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b73e44fe9d advisory. RHBZ2308628 RHBZ2308629 RHBZ2308630 RHBZ2308631 fixed in 5.7.2 release Tenable has extracted the preceding description block directly from the Fedor...

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager EPM, including 10 critical vulnerabilities that could result in remote code execution. A brief description of the issues is as follows - CVE-2024-29847 CVSS score: 10.0 - A deserialization of...

Security Updates for Microsoft Dynamics 365 Business Central (September 2024)

The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a privilege escalation vulnerability. An authenticated, remote attacker can exploit this to gain privileged or administrator access to the system. Note that Nessus has not attempted to...

Photon OS 4.0: Vim PHSA-2024-4.0-0689

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0689. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20696...