OpenSSL 1.0.1 < 1.0.1n Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.1n. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.1n advisory. - The dofreeupto function in crypto/cms/cmssmime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2...

phpMyAdmin 4.0.x < 4.0.10.10 / 4.2.x < 4.2.13.3 / 4.3.x < 4.3.13.1 / 4.4.x < 4.4.6.1 Multiple Vulnerabilities (PMASA-2015-2, PMASA-2015-3) (deprecated)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.10, 4.2.x prior to 4.2.13.3, 4.3.x prior to 4.3.13.1, or 4.4.x prior to 4.4.6.1. It is, therefore, potentially affected by multiple vulnerabilities: - An attacker cou...

WordPress Multiple XSS

According to its version number, the WordPress application running on the remote web server is either version 3.7.x prior to 3.7.8, 3.8.x prior to 3.8.8, 3.9.x prior to 3.9.6, 4.1.x prior to 4.1.5, or 4.2.x prior to 4.2.2. It is, therefore, potentially affected by multiple cross-site scripting...

Ubuntu 14.04 LTS : ClamAV vulnerabilities (USN-2594-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2594-1 advisory. It was discovered that ClamAV incorrectly handled certain malformed files. A remote attacker could use this issue to cause ClamAV to crash, resulting in ...

Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities

The remote web server is running a version of Drupal that is 6.x prior to 6.35 or 7.x prior to 7.35. It is, therefore, potentially affected by the following vulnerabilities : - An access bypass vulnerability exists in which password reset URLs can be forged. This allows a remote attacker to gain...

Oracle Linux 7 : openssh (ELSA-2015-0425)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0425 advisory. - add new option GSSAPIEnablek5users and disable using /.k5users by default CVE-2014-9278 1169843 - prevent a server from skipping SSHFP lookup -...

Wireshark 1.12.x < 1.12.2 Multiple DoS Vulnerabilities

The remote Windows host has a version of Wireshark installed that is 1.12.x prior to 1.12.2. It is, therefore, affected by multiple denial of service vulnerabilities in following dissectors : - AMQP CVE-2014-8711 - NCP CVE-2014-8712, CVE-2014-8713 - SigComp CVE-2014-8710 - TN5250 CVE-2014-8714 A...

phpMyAdmin 4.0.x < 4.0.10.4 / 4.1.x < 4.1.14.5 / 4.2.x < 4.2.9.1 'ENUM' Value XSS (PMASA-2014-11)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.4, 4.1.x prior to 4.1.14.5, or 4.2.x prior to 4.2.9.1. It is, therefore, affected by an input validation error related to the 'ENUM' value and the files...

Wireshark 1.10.x < 1.10.10 Multiple DoS Vulnerabilities

The installed version of Wireshark is version 1.10.x prior to 1.10.10. It is, therefore, affected by the following vulnerabilities : - Errors exist in the following dissectors that can cause the application to crash : - MEGACO CVE-2014-6423 - Netflow CVE-2014-6424 - RTP CVE-2014-6421, CVE-2014-64...

Oracle Linux 5 / 6 / 7 : firefox (ELSA-2014-1144)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1144 advisory. firefox 24.8.0-1.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 24.8.0-1 - Update to 24.8.0 ESR...

Splunk Enterprise 6.1.x < 6.1.3 Multiple Vulnerabilities

According to its version number, the Splunk Enterprise hosted on the remote web server is 6.1.x prior to 6.1.3. It is, therefore, affected by the following vulnerabilities : - A path traversal vulnerability exists due to a flaw related to search IDs, in which user input is not properly sanitized....

Oracle Linux 7 : gnutls (ELSA-2014-0684)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0684 advisory. 3.1.18-9 - fix session ID length check 1102027 - fixes null pointer dereference 1101727 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : kernel (ELSA-2014-0923)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0923 advisory. - net l2tpppp: fail when socket option level is not SOLPPPOL2TP Petr Matousek 1119465 1119466 CVE-2014-4943 Tenable has extracted the preceding...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2014-0890)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0890 advisory. 1.7.0.65-2.5.1.2.0.1.el510 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.65-2.5.1.2 - added and applied fix for samrtcard ...

HylaFAX+ 5.2.4 < 5.5.4 Remote Buffer Overflow

According to its version number, the HylaFAX+ install hosted on the remote web server is 5.2.4 or later and prior to 5.5.4. It is, therefore, affected by a heap-based remote buffer overflow vulnerability. The flaw exists when 'hfaxd' is compiled with support for LDAP. The user input for LDAP...

Asterisk PJSIP Channel Driver Multiple DoS Vulnerabilities (AST-2014-005 / AST-2014-008)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following denial of service vulnerabilities in the PJSIP channel driver : - A flaw exists in the publish / subscribe framework when an attempt to unsubscribe is made when...

Google Chrome < 35.0.1916.153 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 35.0.1916.153. It is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist in the file system API. CVE-2014-3154 - An out-of-bounds read error exists related to SPDY...

Apache Tomcat 7.0.0 < 7.0.54

The version of Tomcat installed on the remote host is prior to 7.0.54. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.54security-7 advisory. - Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class load...

nginx 1.5.10 SPDY Memory Corruption

The installed nginx version is 1.5.10. It is, therefore, affected by a memory corruption vulnerability. A flaw exists with the SPDY module implementation, where worker process memory could be corrupted via a specially crafted request. This could allow a remote attacker to execute arbitrary code...

Ubuntu 14.04 LTS : elfutils vulnerability (USN-2188-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2188-1 advisory. Florian Weimer discovered that the elfutils libdw library incorrectly handled malformed compressed debug sections in ELF files. If a user or automated system were...