Microsoft Windows 10 Version 1607 Unsupported Version Detection (deprecated)

This plugin has been replaced by Windows Security-End-of-Life plugins. C Tenable Network Security, Inc. @DEPRECATED@ Deprecated on 2024 Mar 14. Replaced by Windows SEoL plugins. include"compat.inc"; if description scriptid118715; scriptversion"1.12";...

Fedora 27 : sos-collector (2018-f2f8571abd)

Update to new 1.5 release. Resolves CVE-2018-14650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

AVEVA InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: AVEVA Software, LLC. AVEVA Equipment: InduSoft Web Studio and InTouch Edge HMI formerly InTouch Machine Edition Vulnerabilities: Stack-based Buffer Overflow, Empty Password in Configuration File 2...

SUSE SLED12 / SLES12 Security Update : Test-update for SLE-12-SP4 (security) (SUSE-SU-2018:3556-1)

This is a security test-update for SLE-12-SP4. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

SUSE SLED12 / SLES12 Security Update : lcms2 (SUSE-SU-2018:3545-1)

This update for lcms2 fixes the following security issues : CVE-2016-10165: The TypeMLURead function allowed remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggered an out-of-bounds heap read bsc1021364. CVE-2018-16435...

SUSE SLES11 Security Update : mysql (SUSE-SU-2018:3542-1)

MySQL server was updated to version 5.5.62, fixing bugs and security issues. Changes : http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-62.html Following security issues were fixed : CVE-2016-9843: The crc32big function in zlib might have allowed context-dependent attackers to have...

SUSE SLES11 Security Update : openssh (SUSE-SU-2018:3540-1)

This update for openssh fixes the following issues : Security issues fixed : CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. OpenSSH developers do not want to treat such ...

Debian DLA-1556-1 : paramiko security update

CVE-2018-1000805 Fix to prevent malicious clients to trick the Paramiko server into thinking an unauthenticated client is authenticated. CVE-2018-7750 Fix check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step. F...

Tenable Nessus < 8.0.0 Multiple Vulnerabilities (TNS-2018-14)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 8.0.0. It is, therefore, affected by multiple vulnerabilities: - Tenable Nessus contains a flaw in the bundled third-party component OpenSSL library's key handling during a TLS handshake...

Fedora 27 : python26 (2018-14526cbebe)

Security fix for CVE-2018-14647 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Tenable Log Correlation Engine (LCE) < 5.1.1 (TNS-2018-13)

The version of Tenable Log Correlation Engine LCE installed on the remote host is a version prior to 5.1.1. It is, therefore, affected by multiple vulnerabilities: - A flaw exists in the bundled third-party component OpenSSL library's key handling during a TLS handshake that causes a denial of...

EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2018-1351)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the Linux kernel's createelftables function. An unprivileged local user with access to SUID or...

EulerOS Virtualization 2.5.0 : kvm (EulerOS-SA-2018-1350)

According to the version of the kvm package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide...

Ubuntu 14.04 LTS : audiofile vulnerabilities (USN-3800-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3800-1 advisory. It was discovered that audiofile incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-1344...

Debian DLA-1553-1 : clamav security update

ClamAV is an anti-virus utility for Unix, whose upstream developers have released the version 0.100.2. Installing this new version is required to make use of all current virus signatures and to avoid warnings. This version also fixes a security issue discovered after version 0.100.1 :...

What’s new in Nessus 8

Today Tenable released a new version of their famous vulnerability scanner - Nessus 8. The existing scanner nodes don't see the updates yet, but the installation binaries are already available. So you may try to install it. This major release will be way more positive than the previous one. Of...

SUSE SLES12 Security Update : ntp (SUSE-SU-2018:3351-1)

NTP was updated to 4.2.8p12 bsc1111853 : CVE-2018-12327: Fixed stack-based buffer overflow in the openhost command-line call of NTPQ/NTPDC. bsc1098531 CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection bsc1083424 Please also see...

QLogic QConvergeConsole (QCC) GUI Web Interface Default Credentials

The remote device appears to be running QLogic QConvergeConsole which contains a web interface with default credentials enabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid118331; scriptversion"1.1"; scriptcvsdate"Date: 2018/10/24 10:33:48";...

Ubuntu 18.10 : Tex Live-bin vulnerability (USN-3788-2)

USN-3788-1 fixed vulnerabilities in Tex Live. This update provides the corresponding update for Ubuntu 18.10 It was discovered that Tex Live incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. CVE-2018-17407. Note that Tenable Network Security h...

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:3330-1)

This update for ghostscript-library fixes the following issues : CVE-2018-16511: A type confusion in 'ztype' could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact. bsc1107426 CVE-2018-16540: Attackers able to supply...