Korenix JetNet Arbitrary Unauthenticated TFTP Actions (CVE-2020-12504)

Improper Authorization vulnerability of Korenix JetNet 5428G-20SFP, JetNet 5810G, JetNet 4706F, JetNet 4510, JetNet 5310, JetNet 4706, JetNet 5428G, JetNet 6095, JetNet 4706 use an active TFTP-Service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-o...

Fedora 41 : mingw-expat (2024-fa21fd6c77)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fa21fd6c77 advisory. Update to 2.6.4. ---- Backport fix for CVE-2024-50602. Tenable has extracted the preceding description block directly from the Fedora security...

Oracle Linux 9 : containernetworking-plugins (ELSA-2024-9089)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-9089 advisory. - rebuild for CVE-2024-24791 - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723...

Geo Vision (CVE-2019-11064)

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator's account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any...

GeoVision GV-VR360 and GV-VD8700 Path Traversal (CVE-2019-13408)

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication. This plugin only works with Tenable.ot. Please visit...

Schneider Electric PowerLogic PM5300 Series Uncontrolled Resource Consumption (CVE-2024-9409)

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE M-800 Missing Encryption of Sensitive Data (CVE-2023-28450)

An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Siemens SCALANCE M-800 Use After Free (CVE-2024-4741)

Issue summary: Calling the OpenSSL API function SSLfreebuffers may cause memory to be accessed that was previously freed in some situations This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Fedora 41 : unbound (2024-a5d6cd9f0a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a5d6cd9f0a advisory. Fixed builds on F41. Fixes CVE-2024-8508 - https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1 Tenable has extracted the preceding...

Fedora 38 : azure-cli (2022-ea9c1a9b20)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-ea9c1a9b20 advisory. Automatic update for azure-cli-2.41.0-2.fc38. Changelog Thu Oct 27 2022 Major Hayden 2.41.0-2 - Fix az local dir import bug rhbz2053193 Tenable has extracted...

Fedora 41 : python-mechanicalsoup (2024-45b02f63e4)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-45b02f63e4 advisory. Automatic update for python-mechanicalsoup-1.3.0-1.fc41. Changelog Sun Apr 7 2024 Fabian Affolter - 1.3.0-1 - Update to latest upstream version 1.3.0 closes...

Defense-in-Depth Security Updates for Microsoft SharePoint Server 2016 (November 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211461;...

Fedora 37 : w3m (2022-7d2f942be2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-7d2f942be2 advisory. - Added upstream patch to address CVE-2022-38223 2126270 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 37 : pypy3.8 (2022-20116fb6aa)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-20116fb6aa advisory. Backport fix for CVE-2021-28861 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : firefox (2024-1d8785c391)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1d8785c391 advisory. - New upstream builds 131.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 37 : python-virtualbmc (2022-471e14677d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-471e14677d advisory. Security fix for CVE-2022-44020 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : vim (2022-1e14f3ae45)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-1e14f3ae45 advisory. The newest upstream commit Security fix for CVE-2022-4141 Vim did not recognize key codes passed by Kitty Tenable has extracted the preceding...

Fedora 37 : GitPython (2022-8146a727a8)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-8146a727a8 advisory. Latest upstream release with fix for CVE-2022-24439. Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 41 : chromium (2024-1e45ea2e6c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1e45ea2e6c advisory. Update to 130.0.6723.116 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : chromium (2024-8008ddbd4e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8008ddbd4e advisory. Update to 129.0.6668.70 High CVE-2024-9120: Use after free in Dawn High CVE-2024-9121: Inappropriate implementation in V8 High CVE-2024-9122: Type...