13331 matches found
RHEL 8 : gimp:2.8 (RHSA-2024:0863)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0863 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...
Oracle Linux 8 : dotnet6.0 (ELSA-2024-0808)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0808 advisory. 6.0.127-1.0.1 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 Tenable has extracted the preceding description block directly from the Oracle Linux...
Fedora 39 : vim (2024-12513b5cee)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-12513b5cee advisory. Security fix for CVE-2024-22667 ---- enable building without GPM support - build with GPM in Fedora 2262371 - gvim: symbol lookup error: gvim:...
RHEL 8 : .NET 8.0 (RHSA-2024:0827)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0827 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (February 2024)
The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
Vulnerabilities fixed in SAP products
SAP has fixed vulnerabilities in several SAP products, including Netweaver and CRM. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Cross-Site Scripting XSS. Bypassing authentication Circumvention of security measure Remote code...
AlmaLinux 8 : dotnet6.0 (ALSA-2024:0808)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0808 advisory. - .NET Denial of Service Vulnerability CVE-2024-21386, CVE-2024-21404 Note that Nessus has not tested for these issues but has instead relied only on the...
AlmaLinux 8 : dotnet7.0 (ALSA-2024:0806)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0806 advisory. - .NET Denial of Service Vulnerability CVE-2024-21386, CVE-2024-21404 Note that Nessus has not tested for these issues but has instead relied only on the...
Oracle Linux 9 : dotnet7.0 (ELSA-2024-0805)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0805 advisory. 7.0.116-1.0.1 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 Tenable has extracted the preceding description block directly from the Oracle Linux...
AlmaLinux 9 : dotnet7.0 (ALSA-2024:0805)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0805 advisory. - .NET Denial of Service Vulnerability CVE-2024-21386, CVE-2024-21404 Note that Nessus has not tested for these issues but has instead relied only on the...
Security Updates for Microsoft Visual Studio Products (February 2024)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...
Security Updates for Microsoft Dynamics 365 (on-premises) (February 2024)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities. - Cross-site scripting XSS in Microsoft Dynamics 365 CVE-2024-21327, CVE-2024-21389, CVE-2024-21393, CVE-2024-21395 - Spoofing vulnerability in the Sales and Field Service...
Security Updates for Microsoft Visio Products C2R (February 2024)
The Microsoft Visio Products are missing security updates. It is, therefore, affected by the following: - A remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
Fat Patch Tuesday, February 2024 Edition
Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks. Top of the heap on this Fat Patch Tuesday is CVE-2024-21412, a...
Microsoft and Adobe Patch Tuesday, February 2024 Security Update Review
The new Microsoft Patch Tuesday Edition for February 2024 is now live! We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for February 2024 Microsoft Patch Tuesdays February 2024 edition addressed 79 vulnerabilities, including...
Microsoft Releases Security Updates for Multiple Products
Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s February Security Update Guidelink is...
February 13, 2024—KB5034795 (Monthly Rollup)
None None...
February 13, 2024—KB5034767 (OS Build 14393.6709) - EXPIRED
None None...