ImageMagick < 7.1.1-11 Multiple Vulnerabilities

The remote Windows host has a version of ImageMagick installed that is prior to 7.1.1-10. It is, therefore, affected by multiple vulnerabilites: - remote code execution vulnerability in OpenBlob with --enable-pipes configured. CVE-2023-34152 - security flaw occuring as undefined behavior of casti...

Fedora 38 : kernel (2023-ddfd3073b3)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ddfd3073b3 advisory. The 6.4.9 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

Fedora 37 : kernel (2023-638681260a)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-638681260a advisory. The 6.4.9 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

SUSE SLED15: gstreamer-plugin-pipewire / libpipewire-0_3-0 / etc (SUSE-SU-2023:3256-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3256-1 advisory. This update for pipewire fixes the following security issues: - Fixed issue where an app which only has...

Ubuntu 18.04 ESM : Graphite-Web regression (USN-6243-2)

The remote Ubuntu 18.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6243-2 advisory. USN-6243-1 fixed vulnerabilities in Graphite-Web. It was discovered that the applied fix was incomplete. This update fixes the problem. Tenable has extracted the...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:3240-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3240-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760 Tenable has extracted the preceding description block directly from the SUSE...

AlmaLinux 8 : libcap (ALSA-2023:4524)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4524 advisory. - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to return an...

RHEL 8 : kpatch-patch (RHSA-2023:4531)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4531 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

KB5029301: Windows Server 2008 Security Update (August 2023)

The remote Windows host is missing security update 5029301. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

Rocky Linux 8 : webkit2gtk3 (RLSA-2023:4202)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4202 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS...

Rocky Linux 9 : webkit2gtk3 (RLSA-2023:4201)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4201 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS...

Ubuntu 20.04 LTS : Firefox regressions (USN-6267-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6267-2 advisory. USN-6267-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience...

Zyxel USG < 5.37 / ATP < 5.37 / VPN < 5.37 Multiple Vulnerabilities

Firmware version of the Zyxel USG, ATP, VPN is less than 5.37. This Zyxel device firmware is affected by multiple vulnerabilities: - A command injection vulnerability in the Free Time WiFi hotspot feature of some firewall versions could allow an unauthenticated, LAN-based attacker to execute some...

Debian DSA-5469-1 : thunderbird - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5469 advisory. - Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origi...

MediaWiki < 1.35.0 Multiple Vulnerabilities

According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.35. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the default Cologne Blue skin in the qbfind paramter inside CologneBlueTemplate.php leading to...

RHEL 8 : Red Hat JBoss Enterprise Application Platform (RHSA-2023:4506)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4506 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

AlmaLinux 8 : java-1.8.0-openjdk (ALSA-2023:0208)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0208 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are...

Debian DSA-5467-1 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5467 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For...

Fedora 38 : webkitgtk (2023-a479289864)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a479289864 advisory. Fix several crashes and rendering issues Security fixes: CVE-2023-38133, CVE-2023-38572, CVE-2023-38592, CVE-2023-38594, CVE-2023-38595,...

openSUSE 15 Security Update : pipewire (SUSE-SU-2023:3185-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3185-1 advisory. This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other...