Photon OS 5.0: Linux PHSA-2024-5.0-0393

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0393. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLED15: apache-commons-lang3 / apache-commons-lang3-javadoc / bcel / etc (SUSE-SU-SUSE-RU-2024:3971-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:3971-1 advisory. xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed...

Security Updates for Microsoft Word Products (November 2024)

The Microsoft Word Products are missing security updates. They are, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

 Intel® Server Board S2600ST Family BIOS and Firmware Update software Advisory

Summary: Potential security vulnerabilities in the Intel® Server Board S2600ST Family BIOS and Firmware Update software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for Intel® Server Boar...

PT-2024-7873

Name of the Vulnerable Software and Affected Versions Windows Task Scheduler versions prior to the fixed version in November Patch Tuesday Description The vulnerability is an elevation-of-privilege issue in the Windows Task Scheduler, allowing attackers to elevate their privileges to Medium...

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

Hewlett Packard Enterprise HPE has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including two critical bugs that could result in unauthenticated command execution. The flaws affect Access Points running Instant AOS-8 and AOS-10 -...

Fedora 39 : iaito / radare2 (2024-e7c0a0d876)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-e7c0a0d876 advisory. fix CVE-2024-48241 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 40 : iaito / radare2 (2024-c52c5c8791)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-c52c5c8791 advisory. fix CVE-2024-48241 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CVE-2024-46947

creationtimestamp| type| source ---|---|--- 2024-11-08 15:50:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113448127639962307 2024-11-08 15:50:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113448127670506246 2024-11-08 15:53:51+00:00| seen|...

OracleVM 3.4 : kernel-uek (OVMSA-2024-0015)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.91.3- nfsatomicopen: prevent parallel nfslookup on a negative hashed Al Viro Orabug: 370062394.1.12-124.91.2- vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug:...

CVE-2024-47131

creationtimestamp| type| source ---|---|--- 2024-11-07 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02 2024-11-08 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1463/ 2024-11-08 06:00:00+00:00| seen|...

Photon OS 4.0: Linux PHSA-2024-4.0-0708

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0708. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Update of nss

update to CKBI 2.69 from NSS 3.103 - updated certificates: - Certificate "OISTE WISeKey Global Root GC CA" - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma Chambers of...

Photon OS 5.0: Linux PHSA-2024-5.0-0391

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0391. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 8 : Oracle / Linux / Automation / Manager / 2.2 / (MODERATE) (ELSA-2024-12803)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12803 advisory. Oracle Linux Automation Manager 2.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Wear OS Security Bulletin—November 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2024-11-05 or later from the November 2024 Android Security Bulletin in addition to all issues in this bulletin. We encourage al...

Fedora 40 : python-single-version (2024-e82145eb25)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e82145eb25 advisory. Initial import Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora 40 : mysql8.0 (2024-0c1c9227e5)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-0c1c9227e5 advisory. MySQL 8.0.40 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-40.html Tenable has extracted the preceding description block directly...

CBL Mariner 2.0 Security Update: gdb (CVE-2023-39128)

The version of gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39128 advisory. - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2024-056 (ALASKERNEL-5.15-2024-056)

The version of kernel installed on the remote host is prior to 5.15.168-114.166. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-056 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: inetdefrag: prevent sk release...