RHEL 8 : sane-backends (RHSA-2020:2967)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2967 advisory. Scanner Access Now Easy SANE is a universal scanner interface. The SANE application programming interface API provides standardized access t...

Multiple vulnerabilities fixed in Apple Safari

Apple has fixed several vulnerabilities in Safari. A malicious party can exploit the vulnerabilities to perform attacks that can lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure. Remote code execution User Rights -= Appl...

About the security content of tvOS 13.4.8

About the security content of tvOS 13.4.8 This document describes the security content of tvOS 13.4.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Photon OS 3.0: Python3 PHSA-2020-3.0-0111

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0111. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Sqlite PHSA-2020-3.0-0113

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0113. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13852...

Photon OS 2.0: Net PHSA-2020-2.0-0262

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0262. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138520;...

Oracle Linux 7 : dbus (ELSA-2020-2894)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2894 advisory. 1:1.10.24-14.0.1 - fix netlink poll: error 4 Zhenzhong Duan 1:1.10.24-14 - Fix CVE-2020-12049 1851991 Tenable has extracted the preceding description block...

Oracle Linux 8 : dovecot (ELSA-2020-2901)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2901 advisory. 1:2.3.8-2.1 - fix CVE-2020-10957: malformed NOOP commands leads to DoS 1840353 Tenable has extracted the preceding description block directly from the Oracle...

About the security content of iOS 13.6 and iPadOS 13.6

About the security content of iOS 13.6 and iPadOS 13.6 This document describes the security content of iOS 13.6 and iPadOS 13.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of Safari 13.1.2

About the security content of Safari 13.1.2 This document describes the security content of Safari 13.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Photon OS 1.0: Python PHSA-2020-1.0-0307

An update of the python package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0307. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13851...

Photon OS 1.0: Apache PHSA-2020-1.0-0308

An update of the apache package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13851...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities affecting multiple products. An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

Vulnerabilities fixed in Oracle Java SE

Oracle has fixed vulnerabilities in Oracle Java SE. A malicious party could exploit the vulnerabilities to execute arbitrary code or for causing a denial-of-service. ------------------.------.------------------------------------- | CVE ID | CVSS | Vector |...

Photon OS 1.0: Net PHSA-2020-1.0-0308

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138517;...

Security Updates for Microsoft SharePoint Server (July 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token...

July 14, 2020—KB4565540 (Security-only update)

None None...

July 14, 2020—KB4565489 (OS Build 17134.1610)

None None...

July 14, 2020—KB4565511 (OS Build 14393.3808)

None None...

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...