Fedora 36 : java-11-openjdk (2023-2a2edeb67e)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-2a2edeb67e advisory. updated to java april security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

SUSE-SU-2023:2156-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation bsc1210498. -...

Microsoft Patch Tuesday, May 2023 Edition

Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited in active attacks. First up in Mays zero-day flaws is CVE-2023-29336, which ...

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability...

Fedora 37 : community-mysql (2023-af03a123b5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-af03a123b5 advisory. MySQL 8.0.33 Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html Tenable has extracted the preceding description block directly from...

Fedora 38 : community-mysql (2023-06a49d4fb6)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-06a49d4fb6 advisory. MySQL 8.0.33 Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html Tenable has extracted the preceding description block directly from...

May 9, 2023—KB5026426 (Security-only update)

None None...

May 9, 2023—KB5026427 (Security-only update)

None None...

May 9, 2023—KB5026408 (Monthly Rollup)

None None...

May 9, 2023—KB5026413 (Monthly Rollup)

None None...

May 9, 2023—KB5026361 (OS Builds 19042.2965, 19044.2965, and 19045.2965) - EXPIRED

None None...

Internet Explorer help

None None...

ALSA-2023:2319 Moderate: git security and bug fix update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to 15393.48.0 Platform version: 113.0.5672.114 for most ChromeOS devices and will be rolled out over the next few days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a...

PT-2023-2722 · Microsoft · Sharepoint Server +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Office Online...

KLA49155 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote...

Siemens SICAM P850 and P855 Devices Session Fixation (CVE-2022-40226)

A vulnerability has been identified in SICAM P850 All versions V3.10, SICAM P855 All versions V3.10. Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login. This plug...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 16.4, iOS 16.4 and iPadOS 16.4. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory...

Elastic Kibana 8.7.0 Arbitrary Code Execution Vulnerability (ESA-2023-08)

Kibana is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5.8 security updates and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.5.8 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...