13318 matches found
SUSE: Security Advisory (SUSE-SU-2022:2806-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Updates for Microsoft Visual Studio Products (August 2022)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Fbx File parser Heap overflow Vulnerability. CVE-2022-35777, CVE-2022-35826 - Fbx File parser OOBW Vulnerability. CVE-2022-35825, CVE-2022-35827 Note that Nessus has not...
Sloppy Software Patches Are a ‘Disturbing Trend’
The Zero Day Initiative has found a concerning uptick in security updates that fail to fix vulnerabilities...
Security Updates for Exchange (August 2022)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21979,CVE-2022-30134,...
Security Updates for Microsoft Office Products C2R RCE (August 2022)
The Microsoft Office Products are missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead relied...
Update now! Microsoft fixes two zero-days in August's Patch Tuesday
Microsoft has published fixes for 141 separate vulnerabilities in its batch of August updates, fixing a total of 118 CVEs in multiple products. This is a new monthly record if you look at the CVE count. Publicly disclosed computer security flaws are listed in the Common Vulnerabilities and...
Akamai’s Perspective on August Patch Tuesday
Want the rundown of what to focus on with Patch Tuesday in one place? Check out this blog, and patch, patch, patch!...
OracleVM 3.4 : microcode_ctl (OVMSA-2022-0020)
The remote OracleVM system is missing necessary patches to address security updates: - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2022-21123 - Incomplete cleanup of...
Vulnerabilities fixed in VMware vRealize Operations
Vulnerabilities have been fixed in VMware vRealize Operations. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Bypassing authentication. Remote code execution Administrator/Root privileges Access to sensitive data...
Adobe Framemaker Security Updates (APSB22-42) - Windows
Adobe Framemaker is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:framemaker"; if...
RHEL 9 : kernel-rt (RHSA-2022:6002)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6002 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
OracleVM 3.4 : kernel-uek (OVMSA-2022-0022)
The remote OracleVM system is missing necessary patches to address security updates: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc. The package checks in this plugin were extracted from OracleVM Securit...
HP PC BIOS August 2022 Security Updates for Potential SMM and TOCTOU Vulnerabilities
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities. HP has...
RHEL 9 : vim (RHSA-2022:5942)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5942 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Out-of-bounds Write CVE-2022-1785 vim: out-of-boun...
August 9, 2022-KB5015732 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11
None None...
RHEL 9 : kernel (RHSA-2022:6003)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6003 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: information leak in scsiioctl...
Microsoft Releases August 2022 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s August 2022 Security Update Guide and Deployment...
Security Updates for Microsoft Office Products (August 2022)
The Microsoft Office Products are missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-34717 Note that Nessus has no...
VMware Releases Security Updates
VMware has released security updates to address multiple vulnerabilities in vRealize Operations. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2022-0022 and appl...
Adobe Releases Security Updates for Multiple Products
Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary...