13673 matches found
OPENSUSE-SU-2024:11641-1 libwireshark14-3.4.10-1.1 on GA media
These are all security issues fixed in the libwireshark14-3.4.10-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12706-1 amanda-3.5.2-3.1 on GA media
These are all security issues fixed in the amanda-3.5.2-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10629-1 apr-util-devel-1.6.1-7.8 on GA media
These are all security issues fixed in the apr-util-devel-1.6.1-7.8 package on the GA media of openSUSE Tumbleweed...
leapp bug fix and enhancement update
An update is available for leapp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...
Vulnerabilities fixed in Nvidia GPU Drivers
Nvidia has fixed vulnerabilities in GPU drivers for Windows and Linux. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to grant themselves elevated privileges and execute code with elevated privileges, or gain access to sensitive data. Nvidia has released...
Vulnerabilities fixed in Adobe Experience Manager
Adobe has fixed a large number of vulnerabilities in Experience Manager. A malicious party can exploit the vulnerabilities to bypass security measures and launch a Cross-Site Scripting attack in various ways. Such an attack often results in execution of arbitrary code in the victim's browser, or...
Security Updates for Microsoft Dynamics 365 (on-premises) (June 2024)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for these issues but has instead relied only on th...
Security Updates for Microsoft Dynamics 365 Business Central (June 2024)
The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by multiple vulnerabilities, including: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2024-35248 - A remote code execution...
Oracle Linux 9 : ruby (ELSA-2024-3838)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3838 advisory. - Fix double free in Regexp compilation. Resolves: CVE-2022-28738 Tenable has extracted the preceding description block directly from the Oracle Linux...
Security Updates for Microsoft Office Products C2R (June 2024)
The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerability: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2024-30101 - Microsoft Office is affected by a remote code execution vulnerability. CVE-2024-30104...
Fedora 39 : singularity-ce (2024-c95d3199c5)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c95d3199c5 advisory. Bulk update of bundled Go dependencies. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics and Dynamics Business Central. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code with potentially elevated privileges and gain access to sensitive data in the application. For...
June 11, 2024—KB5039289 (Monthly Rollup)
None None...
June 11, 2024—KB5039266 (Security-only update)
None None...
Fortinet Releases Security Updates for FortiOS
Fortinet has released security updates to address a vulnerability in FortiOS. A cyber threat actor could exploit this vulnerability to take control of an affected system. Users and administrators are encouraged to review the following Fortinet Security Bulletin and apply the necessary updates:...
Microsoft Releases June 2024 Security Updates
Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following advisory and apply the necessary updates...
AVEVA PI Web API
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION : Exploitable remotely/low attack complexity Vendor : AVEVA Equipment : PI Web API Vulnerability : Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform remote code...
PT-2024-4270
Name of the Vulnerable Software and Affected Versions Microsoft Streaming Service affected versions not specified Windows affected versions not specified Description The issue is related to a use-after-free vulnerability in the Microsoft Streaming Service of Windows operating systems, which can...
KB5039340: Servicing stack update for Windows Server 2012 R2: June 11, 2024
KB5039340: Servicing stack update for Windows Server 2012 R2: June 11, 2024 End of support information Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend...