RHEL 8 : .NET 8.0 (RHSA-2024:0827)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0827 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

AlmaLinux 8 : dotnet7.0 (ALSA-2024:0806)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0806 advisory. - .NET Denial of Service Vulnerability CVE-2024-21386, CVE-2024-21404 Note that Nessus has not tested for these issues but has instead relied only on the...

Oracle Linux 9 : dotnet7.0 (ELSA-2024-0805)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0805 advisory. 7.0.116-1.0.1 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 Tenable has extracted the preceding description block directly from the Oracle Linux...

AlmaLinux 9 : dotnet7.0 (ALSA-2024:0805)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0805 advisory. - .NET Denial of Service Vulnerability CVE-2024-21386, CVE-2024-21404 Note that Nessus has not tested for these issues but has instead relied only on the...

Security Updates for Microsoft Visual Studio Products (February 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...

Security Updates for Microsoft Dynamics 365 (on-premises) (February 2024)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities. - Cross-site scripting XSS in Microsoft Dynamics 365 CVE-2024-21327, CVE-2024-21389, CVE-2024-21393, CVE-2024-21395 - Spoofing vulnerability in the Sales and Field Service...

Security Updates for Microsoft Visio Products C2R (February 2024)

The Microsoft Visio Products are missing security updates. It is, therefore, affected by the following: - A remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Fat Patch Tuesday, February 2024 Edition

Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks. Top of the heap on this Fat Patch Tuesday is CVE-2024-21412, a...

Microsoft and Adobe Patch Tuesday, February 2024 Security Update Review

The new Microsoft Patch Tuesday Edition for February 2024 is now live! We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for February 2024 Microsoft Patch Tuesdays February 2024 edition addressed 79 vulnerabilities, including...

Microsoft Releases Security Updates for Multiple Products

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s February Security Update Guidelink is...

February 13, 2024—KB5034795 (Monthly Rollup)

None None...

February 13, 2024—KB5034767 (OS Build 14393.6709) - EXPIRED

None None...

February 13, 2024—KB5034765 (OS Builds 22621.3155 and 22631.3155)

None None...

February 13, 2024—KB5034833 (Security-only update)

None None...

February 13, 2024—KB5034831 (Monthly Rollup)

None None...

Vulnerability fixed in Microsoft Windows Defender

Microsoft has fixed a vulnerability in Defender for Endpoint. A local malicious agent could exploit the vulnerability to execute arbitrary code with SYSTEM privileges and thus potentially gain access to sensitive data on the system. Microsoft has made updates available that fix the described...

KB5034865: Servicing stack update for Windows Server 2008 R2 SP1: February 13, 2024

None None...

Ubuntu 22.04 LTS / 23.10 : .NET vulnerabilities (USN-6634-1)

The remote Ubuntu 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6634-1 advisory. Brennan Conroy discovered that .NET with SignalR did not properly handle malicious clients. An attacker could possibly use this issue to cause a...

Security Updates for Azure File Sync Agent (February 2024)

The Microsoft Azure File Sync Agent running on the remote host is 16.0 prior to 16.2 or 17.0 prior to 17.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Security Updates for Azure Connected Machine Agent (February 2024)

The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.38. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...