CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack Confirmed

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition software have come under active exploitation in the wild. To that end, it has added the vulnerabilities to its Known Exploited Vulnerabilities KEV...

Defense-in-Depth Security Updates for Microsoft SharePoint Server 2019 (November 2024)

The Microsoft SharePoint Server 2019 installation is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211460; scriptversion"1.2";...

Defense-in-Depth Security Updates for Microsoft SharePoint Server 2016 (November 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211461;...

Fedora 38 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2022-6aa833b95f)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-6aa833b95f advisory. Rebase Jackson packages to the latest upstream version 2.14.1 Tenable has extracted the preceding description block directly from the Fedora securit...

Security Updates for Microsoft SQL Server (November 2024)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-38255,...

Photon OS 4.0: Apr PHSA-2024-4.0-0711

An update of the apr package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0711. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid21139...

Defense-in-Depth Security Updates for Microsoft SharePoint Server Subscription Edition (November 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211459;...

Fedora 37 : java-17-openjdk (2022-f687000ef7)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f687000ef7 advisory. New in release OpenJDK 17.0.5 2022-10-18 Release announcement Full release notes Security Fixes - JDK-8282252: Improve BigInteger/Decimal validation...

Photon OS 4.0: Linux PHSA-2024-4.0-0711

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0711. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Updates for Microsoft SQL Server (September 2024) (Remote)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-38255,...

Photon OS 5.0: Apache PHSA-2024-5.0-0402

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0402. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 37 : kernel (2022-90162a1d88)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-90162a1d88 advisory. The 6.0.15 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

CVE-2024-5594

creationtimestamp| type| source ---|---|--- 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06 2025-01-06 13:54:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113781746778966575 2025-01-06 14:15:27+00:00| seen|...

Fedora 37 : python2.7 (2022-b8559307db)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b8559307db advisory. Automatic update for python2.7-2.7.18-20.fc37. Changelog Wed Feb 16 2022 Charalampos Stratakis - 2.7.18-20 - Security fixes for CVE-2021-4189 and...

Fedora 41 : openssl (2024-7d5c1bcc78)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7d5c1bcc78 advisory. Fix CVE-2024-5535: SSLselectnextproto buffer overread Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 41 : firefox (2024-24fbd327e3)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-24fbd327e3 advisory. - New upstream update 132.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 37 : bash (2022-bf387ff344)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bf387ff344 advisory. Add a null check in parameterbracetransform function Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-7049-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7049-2 advisory. USN-7049-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Tenable ha...

Security Updates for Azure CycleCloud (November 2024)

The Azure CycleCloud product is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists due to a disclosure of the storage credentials. An authenticated, remote attacker can exploit this to bypass authentication and execu...

Fedora 37 : python-slixmpp (2022-6720bd776b)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6720bd776b advisory. Security fix for CVE-2022-45197 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...