Fedora 39 : botan2 (2024-6d84a608f1)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6d84a608f1 advisory. Rebase to v2.19.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Ivanti Releases Security Updates for Endpoint Manager

Ivanti released security updates to address vulnerabilities in Ivanti Endpoint Manager EPM and Ivanti Endpoint Manager for Mobile EPMM. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the...

Cisco Releases Security Updates for Multiple Products

Cisco released security updates to address vulnerabilities in Cisco software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply necessary updates: Cisco Secu...

thunderbird security update

115.13.0-3.0.1 - Add Oracle prefs file 115.13.0 - Add OpenELA debranding 115.13.0-3 - Update to 115.13.0 build5 115.13.0-2 - Update to 115.13.0 build3 115.13.0-1 - Update to 115.13.0 build1...

Fedora 40 : freeradius (2024-04ba1ff731)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-04ba1ff731 advisory. Update to upstream release 3.2.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Vulnerabilities fixed in Oracle Supply Chain

Vulnerabilities have been fixed in Oracle Supply Chain. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Access to sensitive data Access to system data Manipulation of data Remote code execution User...

Microsoft Security Update Validation Report July 2024

Microsoft’s July 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Important Photon OS Security Update - PHSA-2024-5.0-0316

Updates of 'powershell' packages of Photon OS have been released...

Fedora 39 : pgadmin4 (2024-9820d9491f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9820d9491f advisory. Backport security fixes for CVE-2024-4216, CVE-2024-4068, CVE-2024-4067. Tenable has extracted the preceding description block directly from the...

Fedora 40 : python3.6 (2024-732aedeb4d)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-732aedeb4d advisory. Security fix for CVE-2024-4032 rhbz2293394 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 39 : python-urllib3 (2024-e0b0ad79b2)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e0b0ad79b2 advisory. Update to 1.26.19 to fix CVE-2024-37891 rhbz2292790 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool

Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 CVSS score: 9.3, the vulnerability has been described as a case of missing authentication in its...

Security Updates for Microsoft Office Products C2R (July 2024)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-38021 - A session spoofing...

Ubuntu: Security Advisory (USN-6886-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities fixed in Siemens Products

Siemens has fixed vulnerabilities in various products such as Mendix, RUGGEDOM, SIMATIC, SINEMA, SIPROTEC and the Engineering Platforms for various systems. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the following categories of damage: -...

Citrix Releases Security Updates for Multiple Products

Citrix released security updates to address vulnerabilities in multiple Citrix products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: NetScaler...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply...

Microsoft Releases July 2024 Security Updates

Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft...

KB5040426: Cumulative security update for Internet Explorer: July 9, 2024

KB5040426: Cumulative security update for Internet Explorer: July 9, 2024 Important Certain versions of Microsoft Internet Explorer have reached the end of support. Note that some versions of Internet Explorer may be supported past the latest OS end date when Extended Security Updates ESUs are...

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...