Fedora 38 : dr_libs (2023-494ae331b6)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-494ae331b6 advisory. Update to 4b3d078 drwav 0.13.8: fix a possible null-pointer dereference and a crash when loading files with badly-formed metadata. Tenable has extracted the...

Vulnerabilities fixed in Oracle Hyperion

Oracle has fixed vulnerabilities in Oracle Hyperion products. The vulnerabilities allow a malicious party to cause a denial-of-service DoS or to execute arbitrary code execute arbitrary code under the application's permissions. ------------------.------.------------------------------------- | CVE...

Vulnerabilities fixed in Oracle Supply Chain

Vulnerabilities have been fixed in Oracle Supply Chain Products Suite, specifically in the Agile PLM. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data...

Google Chrome Security Updates (stable-channel-update-for-desktop_18-2023-04) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Fedora 37 : gh / golang-github-cenkalti-backoff / golang-github-cli-crypto / etc (2023-cb20f08a4e)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-cb20f08a4e advisory. Update gh to 2.27.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 36 : parcellite (2023-62eec774ea)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-62eec774ea advisory. bump to v1.2.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Critical: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.2.3 security updates and bug fixes

Multicluster Engine for Kubernetes 2.2.3 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to a denial-of-service DoS or manipulation of data. Oracle has fixed vulnerabilities in the following products: - Oracle Database Server - Oracle...

Shopware Has Improper Control of Generation of Code in Twig rendered views

Impact We fixed with CVE-2023-22731 Twig filters to only be executed with allowed functions. It is possible to pass PHP Closures as string or an array and array crafted PHP Closures was not checked against allow list Patches The problem has been fixed with 6.4.20.1 with an improved override...

SUSE-SU-2023:1894-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1611: Fixed an use-after-free flaw in btrfssearchslot bsc1209687. - CVE-2020-36691: Fixed an issue which could allow attackers to cause a denial of...

Fedora 38 : libxml2 (2023-a521b917c8)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a521b917c8 advisory. Update to 2.10.4 Fix CVE-2023-29469 Fix CVE-2023-28484 Tenable has extracted the preceding description block directly from the Fedora security...

Fortinet Addresses Security Flaws Across Multiple Products

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Fortinet releases security updates for multiple products, including a significant FortiPresence vulnerability patch. To receive real-time threat advisories, please follow HiveForce Labs on LinkedI...

Fedora 38 : polkit (2023-41bdb7dba8)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-41bdb7dba8 advisory. config file permission change to increase security of polkitd Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 38 : dnsmasq (2023-eeca11a4df)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-eeca11a4df advisory. According to DNS flag day set default packet size to 1232 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 38 : mediawiki (2023-9d6ab5ebf2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9d6ab5ebf2 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/message/6UQBHI5FWLATD7QO7DI4YS54U7XSSLAN/ Tenable has extracted the...

Fedora 38 : dpdk / openvswitch (2023-a633c4273f)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-a633c4273f advisory. dpdk updated to 22.11.1 and openvswitch updated to 3.1.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 38 : libyang (2023-93d978c182)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-93d978c182 advisory. Rebase to version 2.1.55 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 38 : zchunk (2023-86dce75007)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-86dce75007 advisory. Fix several low severity security bugs. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 36 : firefox (2023-50f9eb7aca)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-50f9eb7aca advisory. - New upstream update 112.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read

This CVE was assigned by Mitre. Some Microsoft products consume Lau open-source software. The purpose of this document is to attest to the fact that the products listed in the Security Updates table have been updated to protect against this vulnerability...