13331 matches found
kernel: Fix of 7 CVEs
KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...
CentOS 9 : libtpms-0.9.1-2.20211126git1ff6fe1f43.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtpms-0.9.1-2.20211126git1ff6fe1f43.el9 build changelog. - out-of-bounds access when trying to resume the state of the vTPM CVE-2021-3623 - out-of-bounds access via specially...
CentOS 9 : vim-8.2.2637-16.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-16.el9 build changelog. - Use of Out-of-range Pointer Offset in vim prior CVE-2022-0554 - Heap-based Buffer Overflow occurs in vim CVE-2022-0943 Note that Nessus h...
CentOS 9 : glib2-2.68.4-9.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-9.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...
CentOS 9 : glib2-2.68.4-8.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-8.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...
CentOS 9 : cups-2.3.3op2-19.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the cups-2.3.3op2-19.el9 build changelog. - heap buffer overflow may lead to DoS CVE-2023-32324 - use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 Note that...
February 29, 2024—KB5034848 (OS Builds 22621.3235 and 22631.3235) Preview
None None...
RHEL 8 : gimp:2.8 (RHSA-2024:1007)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1007 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...
Fedora 38 : dhcpcd (2024-2bb2bb2467)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2bb2bb2467 advisory. Finished security issue handling broken DHCP packets. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
Fedora 39 : mingw-qt5-qt3d / mingw-qt5-qtactiveqt / mingw-qt5-qtbase / etc (2024-a8cdce27ac)
The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-a8cdce27ac advisory. Update to qt-5.15.12. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora 38 : expat (2024-8a2c093df5)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8a2c093df5 advisory. Rebase to version 2.6.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Vulnerability fixed in SonicWall SSL-VPN products
SonicWall has fixed a vulnerability in SMA 100 series SSL VPNs. An authenticated malicious party can exploit the vulnerability exploit the vulnerability to establish a link to the mobile MFA device of another user and thus potentially gain access to sensitive data in the victim's context. SonicWa...
CISA Adds One Known Exploited ConnectWise Vulnerability, CVE-2024-1709, to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability CISA urges organizations to review the ConnectWise Security Bulletin and apply the necessary...
Vulnerabilities fixed in Joomla!
Vulnerabilities have been fixed in Joomla! CMS. A malicious person can exploit the vulnerabilities to bypass a security measure bypass or perform a Cross-Site-Scripting XSS attack. Such an attack can lead to execution of arbitrary code in the victim's browser, or access to sensitive data in the...
Vulnerabilities fixed in Liferay Portal and DXP
Liferay has fixed vulnerabilities in Liferay Portal and DXP. A malicious party can exploit the vulnerabilities to launch a variety of ways to launch a Cross-Site Scripting attack. A such an attack can lead to execution of arbitrary code in the victim's victim's browser, or access sensitive data i...
AlmaLinux 8 : gimp:2.8 (ALSA-2024:0861)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0861 advisory. gimp: PSD buffer overflow RCE CVE-2023-44442 gimp: psp off-by-one RCE CVE-2023-44444 Tenable has extracted the preceding description block directly from t...
Mozilla Releases Security Updates for Firefox and Thunderbird
Mozilla released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Mozilla Security Advisorie...
Fedora 38 : rear (2024-49ddbf447d)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-49ddbf447d advisory. Fri Feb 9 2024 Luk Zaoral - 2.7-8 - Sync with patches in CentOS Stream 9 kudos to @pcahyna! chronologically from the latest: - Resolve libs for...
Fedora 39 : rear (2024-a2f6e5ddb8)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a2f6e5ddb8 advisory. Fri Feb 9 2024 Luk Zaoral - 2.7-8 - Sync with patches in CentOS Stream 9 kudos to @pcahyna! chronologically from the latest: - Resolve libs for...