Malicious code in tenable-universal-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1380 Malicious code in tenable-universal-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 40 : python3.14 (2025-3726ae12e9)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3726ae12e9 advisory. Security fix for CVE-2025-0938 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 40 : python3.10 (2025-10e053d399)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-10e053d399 advisory. Security fix for CVE-2025-0938 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 40 : python3.11 (2025-f613fe78b6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f613fe78b6 advisory. Security fix for CVE-2025-0938 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39949)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Dahua Security Digital Video Recorders Permissions, Privileges, and Access Controls (CVE-2013-3614)

Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39945)

A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39948)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Dahua Security Digital Video Recorders Credentials Management Errors (CVE-2013-3612)

Dahua DVR appliances have a hardcoded password for 1 the root account and 2 an unspecified backdoor account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving a ActiveX, b a standalone client, or c unknown other vectors. This plugin on...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47755)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47755 advisory. - NIST NVD Details CVE-2024-47755 Note that Nessus has not tested for this issue but has instead relied only o...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2025:0370-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0370-1 advisory. - CVE-2025-0725: Fixed gzip integer overflow bsc1236590 - CVE-2025-0167: Fixed netrc and default credential le...

RHEL 9 : tbb (RHSA-2025:1213)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1213 advisory. Threading Building Blocks TBB is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance...

Photon OS 5.0: Git PHSA-2025-5.0-0463

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0463. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid21520...

Photon OS 4.0: Linux PHSA-2025-4.0-0750

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0750. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Linux PHSA-2025-4.0-0742

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0742. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : kernel-rt (RHSA-2025:1231)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1231 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Ubuntu 24.10 : rsync regression (USN-7206-4)

The remote Ubuntu 24.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7206-4 advisory. USN-7206-3 fixed vulnerabilities in rsync for Ubuntu 24.10. The update introduced a regression in rsync. This update fixes the problem. We apologize for the...

Photon OS 5.0: Libtiff PHSA-2025-5.0-0464

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0464. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

FreeBSD : cacti -- Multiple vulnerabilities (e7974ca5-e4c8-11ef-aab3-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e7974ca5-e4c8-11ef-aab3-40b034429ecf advisory. Cacti repo reports: Tenable has extracted the preceding description block directly from the...