Photon OS 3.0: Linux PHSA-2024-3.0-0742

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0742. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Telegraf PHSA-2023-3.0-0538

An update of the telegraf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Curl PHSA-2022-4.0-0176

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0176. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Unbound PHSA-2022-4.0-0232

An update of the unbound package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0232. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Wpa_Supplicant PHSA-2019-3.0-0039

An update of the wpasupplicant package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0039. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Glibc PHSA-2022-4.0-0155

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0155. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Rubygem PHSA-2021-4.0-0115

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0115. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Nmap PHSA-2023-4.0-0528

An update of the nmap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0528. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Vim PHSA-2023-4.0-0389

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0389. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20315...

Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0464)

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...

Photon OS 4.0: Dbus PHSA-2022-4.0-0263

An update of the dbus package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0263. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Imagemagick PHSA-2023-5.0-0164

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0164. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Python3 PHSA-2021-4.0-0123

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0123. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Amazon Linux 2023 : composer (ALAS2023-2024-659)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-659 advisory. Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the composer install command running inside a git/hg repository which has specially crafted branch names c...

Photon OS 3.0: Libvirt PHSA-2019-3.0-0016

An update of the libvirt package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0016. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 39 : fluent-bit (2024-f3c8d05888)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f3c8d05888 advisory. Update to 3.0.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Apache Hugegraph 1.0.0 < 1.3.0 Remote Command Execution

Apache Hugegraph versions 1.0.0 prior to 1.3.0 is affected by a vulnerability allowing an unauthenticated attacker to execute remote commands via a specially forged request. No source data...

Bricks Theme for WordPress < 1.9.6.1 Remote Code Execution

The WordPress Bricks Theme installed on the remote host is affected by a vulnerability allowing an unauthenticated attacker to execute arbitrary code via a specially forged request. No source data...

Zoom Workplace Desktop App For Windows < 6.0.10 Privilage Escalation (ZSB-24026)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.10. It is, therefore, affected by a privilage escalation vulnerability that may allow a local authenticated attacker to cause a privilege escalation. Note that Nessus has not tested for this issue b...

Amazon Corretto Java 11.x < 11.0.24.8.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.24.8.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-11-2024-Jul-16 advisory. - hotspot/runtime CVE-2024-21131, CVE-2024-21138 - hotspot/compiler CVE-2024-21140, CVE-2024-21147 ...