Fedora 38 : bind / bind-dyndb-ldap (2022-5cf67355ec)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-5cf67355ec advisory. - Upstream release notes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : bash (2022-bf387ff344)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bf387ff344 advisory. Add a null check in parameterbracetransform function Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 37 : mingw-expat (2022-5f1e2e9016)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-5f1e2e9016 advisory. Update to 2.5.0, fixes CVE-2022-43680. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 41 : openssl (2024-7d5c1bcc78)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7d5c1bcc78 advisory. Fix CVE-2024-5535: SSLselectnextproto buffer overread Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 37 : jhead (2022-628829f0e6)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-628829f0e6 advisory. added patches to fix CVE-2022-41751 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Fedora 41 : firefox (2024-24fbd327e3)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-24fbd327e3 advisory. - New upstream update 132.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-7049-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7049-2 advisory. USN-7049-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Tenable ha...

Fedora 37 : bcel (2022-01a56f581c)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-01a56f581c advisory. Security fix: CVE-2022-42920 bcel: Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing Tenable has extracted the preceding description...

Fedora 37 : ghc-cmark-gfm (2022-dc6d6d9d6c)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-dc6d6d9d6c advisory. updates the C library to 0.29.0.gfm.6 which fixes CVE-2022-39209 Tenable has extracted the preceding description block directly from the Fedora...

Fedora 41 : nextcloud (2024-19e63ed69e)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-19e63ed69e advisory. 29.0.6 release RHBZ2305125 RHBZ2309499 fixes CVE-2024-39338 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 41 : webkit2gtk4.0 (2024-92d80d7f9a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-92d80d7f9a advisory. Update to 2.46.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 37 : python-slixmpp (2022-6720bd776b)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6720bd776b advisory. Security fix for CVE-2022-45197 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : libtar (2022-88772d0a2d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-88772d0a2d advisory. - fix use-after-free bugs introduced by incorrect memleak fixes CVE-2021-33640 Tenable has extracted the preceding description block directly from t...

Fedora 41 : oci-cli / python-oci (2024-13270a731d)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-13270a731d advisory. Update oci-cli to 3.43.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

CVE-2024-48510

creationtimestamp| type| source ---|---|--- 2024-11-13 14:53:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113476213133846607 2024-11-13 17:13:36+00:00| seen| https://t.me/cvedetector/10825 2025-02-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-...

CVE-2024-34784

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-34780

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-32841

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

Ubuntu: Security Advisory (USN-7105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Updates for Microsoft Visual Studio Products (November 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A remote unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to a .NET vulnerable webapp or loading a specially...