13318 matches found
Security Updates for Microsoft SharePoint Server 2019 (December 2022)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 70300 C...
December 13, 2022 Security update (KB5021236)
None None...
About the security content of tvOS 16.2
About the security content of tvOS 16.2 This document describes the security content of tvOS 16.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of iOS 15.7.2 and iPadOS 15.7.2
About the security content of iOS 15.7.2 and iPadOS 15.7.2 This document describes the security content of iOS 15.7.2 and iPadOS 15.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
PT-2022-5845 · Microsoft · 365 Apps For Enterprise +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft Office Graphics...
Microsoft Releases December 2022 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s December 2022 Security Update Guide and Deployment...
About the security content of macOS Monterey 12.6.2
About the security content of macOS Monterey 12.6.2 This document describes the security content of macOS Monterey 12.6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Security Updates for Microsoft Visual Studio Products (Dec 2022)
The Microsoft Visual Studio Products are affected by a remote code execution vulnerability in .NET Core 3.1, .NET 6.0, and .NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files. Note that Nessus has not tested for this issu...
About the security content of macOS Ventura 13.1
About the security content of macOS Ventura 13.1 This document describes the security content of macOS Ventura 13.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
Mozilla Releases Security Updates for Thunderbird and Firefox
Mozilla has released security updates to address vulnerabilities in Thunderbird, Firefox ESR, and Firefox. An attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Mozilla’s security advisories for Thunderbird 102.6,...
VMware Releases Security Updates for Multiple products
VVMware has released security updates to address multiple vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisories VMSA-2022-0031,...
Citrix Releases Security Updates for Citrix ADC, Citrix Gateway
Citrix has released security updates to address a critical vulnerability CVE-2022-27518 in Citrix ADC and Citrix Gateway. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability has been exploited in the wild. CISA encourages users and administrators...
Security Updates for Microsoft SharePoint Server 2016 (December 2022)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 70300 C...
RHEL 8 : kernel-rt (RHSA-2022:8941)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8941 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
Security Updates for Microsoft SharePoint Server Subscription Edition (December 2022)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands...
About the security content of macOS Big Sur 11.7.2
About the security content of macOS Big Sur 11.7.2 This document describes the security content of macOS Big Sur 11.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Vulnerability fixed in FortiOS SSL-VPN
Fortinet has fixed a vulnerability in FortiOS SSL-VPN. A unauthenticated remote malicious party can exploit the vulnerability exploit it to execute arbitrary code. This requires malicious network traffic must be sent to the vulnerable interface sent. Fortinet says it is aware of an incident in...
Fortinet Releases Security Updates for FortiOS
Fortinet has released security updates to address a heap-based buffer overflow vulnerability CVE-2022-42475 in FortiOS. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability has been exploited in the wild. CISA encourages users and administrators t...
Scientific Linux Security Update : grub2 on SL7.x x86_64 (2022:8900)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:8900-1 advisory. - grub2: Integer underflow in grubnetrecvip4packets CVE-2022-28733 Note that Nessus has not tested for this issue but has instead relied only on the...
CLSA-2022-1670518262 Fix CVE(s): CVE-2022-40303, CVE-2022-40304
SECURITY UPDATE: Integer overflows with XMLPARSEHUGE - debian/patches/CVE-2022-40303.patch: Impose size limits when XMLPARSEHUGE is set and add length checks to core parser functions - CVE-2022-40303 SECURITY UPDATE: Dict corruption caused by entity reference cycles -...