11769 matches found
Ubuntu 14.04 LTS : Lua vulnerability (USN-2338-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2338-1 advisory. It was discovered that Lua incorrectly handled certain vararg functions with a large number of fixed parameters. An attacker could use this issue to cause Lua...
Oracle Linux 5 / 6 / 7 : firefox (ELSA-2014-1144)
The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1144 advisory. firefox 24.8.0-1.0.1.el70 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 24.8.0-1 - Update to 24.8.0 ESR...
Ubuntu 14.04 LTS : Libgcrypt vulnerability (USN-2339-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2339-2 advisory. Daniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was susceptible to an adaptive chosen ciphertext attack via physical side channels. A local...
Ubuntu 14.04 LTS : LibreOffice vulnerability (USN-2331-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2331-1 advisory. Rohan Durve and James Kettle discovered LibreOffice Calc sometimes allowed for command injection when opening spreadsheets. If a user were tricked into opening a...
Microsoft Windows SMB Registry : McAfee EPO GUID
By reading the registry key HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent, it was possible to determine that the remote Windows system is managed by McAfee EPO. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77477; scriptversion"1.7";...
Fedora 20 : perl-Plack-1.0031-1.fc20 (2014-9542)
---------------------------------------------------------------------- ---------- ChangeLog : - Fri Aug 8 2014 Ralf Corsepius - 1.0031-1 - Upstream update. - Thu Jan 16 2014 Ralf Corsepius - 1.0030-3 - Move misplaced %exclude-line from base-package to -Test. - Wed Jan 15 2014 Ralf Corsepius -...
Fedora 19 : subversion-1.7.18-1.fc19 (2014-9521)
This update includes the latest stable release of Apache Subversion 1.7, version 1.7.18, fixing a minor security issue. Client-side bugfixes: - guard against md5 hash collisions when finding cached credentials CVE-2014-3528. See : http://subversion.apache.org/security/CVE-2014-3528-advisory.txt...
Ubuntu 14.04 LTS : GNU C Library vulnerability (USN-2328-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2328-1 advisory. Tavis Ormandy and John Haxby discovered that the GNU C Library contained an off-by-one error when performing transliteration module loading. A local attacker coul...
Fedora 20 : glibc-2.18-14.fc20 (2014-9824)
Locale names, including those obtained from environment variables LANG and the LC variables, are more tightly checked for proper syntax. setlocale will now fail with EINVAL for locale names that are overly long, contain slashes without starting with a slash, or contain '..' path components...
Ubuntu 14.04 LTS : Squid 3 vulnerability (USN-2327-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2327-1 advisory. Matthew Daley discovered that Squid 3 did not properly perform input validation in request parsing. A remote attacker could send crafted Range requests to cause a...
Fedora 20 : sks-1.1.5-2.fc20 (2014-9344)
Upgrade to 1.1.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
Fedora 20 : jakarta-commons-httpclient-3.1-15.fc20 (2014-9581)
Security fix for CVE-2014-3577, CVE-2012-6153 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
The version of Autodesk SketchBook Pro installed on the remote Mac OS X host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code. C...
Fedora 20 : wordpress-3.9.2-3.fc20 (2014-9264)
Upstream announcement: http://wordpress.org/news/2014/08/wordpress-3-9-2/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Ubuntu 14.04 LTS : OpenStack Neutron vulnerabilities (USN-2321-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2321-1 advisory. Liping Mao discovered that OpenStack Neutron did not properly handle requests for a large number of allowed address pairs. A remote authenticated attacke...
Ubuntu 14.04 LTS : OpenStack Glance vulnerability (USN-2322-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2322-1 advisory. Thomas Leaman and Stuart McLaren discovered that OpenStack Glance did not properly honor the imagesizecap configuration option. A remote authenticated attacker...
Tenable Appliance Check (deprecated)
This plugin was previously used to detect if the local scanner was using the Tenable Appliance. It is no longer needed, and is now obsolete. %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77329; scriptversion "1.2"; scriptcvsdate"Dat...
KLA10269 OSI vulnerability in Nessus
An unspecified vulnerability was found in Nessus. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely at a point related to Web UI. Original advisories - Related products Nessus CVE list CVE-2014-4980 warning Solution...