Photon OS 3.0: Cassandra PHSA-2021-3.0-0193

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0193. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Elasticsearch PHSA-2021-2.0-0317

An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0317. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Python3 PHSA-2021-2.0-0317

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0317. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Glibc PHSA-2021-3.0-0193

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0193. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146486...

Photon OS 2.0: Openldap PHSA-2021-2.0-0318

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0318. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Updates for Microsoft SharePoint Server 2010 (February 2021)

The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Security Updates for Microsoft SharePoint Server 2013 (February 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Vulnerabilities fixed in PostgreSQL

Several vulnerabilities have been fixed in PostgreSQL. A malicious person with limited privileges could potentially exploit them to gain access to data stored in a PostgreSQL database. Developers have released updates to fix the vulnerabilities fixes in PostgreSQL 13.2, 12.6, 11.11, 10.16, 9.6.21...

Security Updates for Microsoft SharePoint Server 2019 (February 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Security Updates for Microsoft SharePoint Server 2016 (February 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

TCP/IP に影響を与える脆弱性情報に関する注意喚起

「Multiple Security Updates Affecting TCP/IP: CVE-2021-24074, CVE-2021-24094, and CVE-2021-24086」の日本語抄訳です。 2021 年 2 月 9 日 日本時...

RHEL 8 : openvswitch2.13 (RHSA-2021:0497)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0497 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

Vulnerability fixed in IBM WebSphere Application Server

IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE attack when processing XML data. An external attacker can exploit this security vulnerability to obtain obtain sensitive information. IBM has released updates to fix the vulnerability. For more information, see...

Security Updates for Microsoft Visual Studio Products (February 2021)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-1639 - A denial of servic...

Vulnerabilities fixed in Schneider Electric equipment

Vulnerabilities have been fixed in Schneider Electric devices. The vulnerabilities allow an unauthorized malicious person at remotely able to cause a denial-of-service and to obtain sensitive data Schneider Electric has released updates to address the vulnerabilities. fix. More information can be...

Fedora 33 : czmq (2021-c756747fd0)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-c756747fd0 advisory. - Downstream of zeromq, rebuilt to fix security issues FEDORA-2021-c756747fd0 Note that Nessus has not tested for this issue but has instead relied only on t...

Vulnerabilities fixed in Xerox WorkCentre

Xerox has fixed several vulnerabilities in WorkCentre. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service or to perform a Cross-Site Scripting XSS attack. The latter can lead to the execution of arbitrary script code in the browser used to visit the application is...

olcne security update

kata-runtime 1.7.3-1.0.7 - Address CVE-2020-28914 kata 1.7.3-1.0.12 - UEKR6 guest kernel support 1.7.3-1.0.11 - Address CVE-2020-28914 kubernetes 1.17.9-1.0.6 - Kata CVE-2020-28914 olcne 1.1.10-1 - Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to...

Fedora 33 : firefox (2021-d8c4f1d99f)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-d8c4f1d99f advisory. - Update to latest upstream version 85.0.1 FEDORA-2021-d8c4f1d99f Note that Nessus has not tested for this issue but has instead relied only on the...

Vulnerabilities fixed in Adobe Acrobat

Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates fix multiple critical and important vulnerabilities. Successful misuse can lead to execution of arbitrary code in the context of the current user or obtain elevated privileges. Adobe has received...