CVE-2024-12174

CVE-2024-12174 affects Tenable Security Center and is caused by improper certificate validation when Security Center sends emails via an SMTP server. The underlying issue allows an authenticated, privileged attacker to intercept email messages sent from Security Center using a rogue SMTP server. ...

Tenable Security Center 安全漏洞

Tenable Security Center is a security center from Tenable USA. Tenable Security Center has a security vulnerability that originates from incorrect certificate validation. An authenticated, privileged attacker could use this vulnerability to intercept email sent from Security Center via a maliciou...

PT-2024-17470 · Tenable · Tenable Security Center

Name of the Vulnerable Software and Affected Versions: Tenable Security Center affected versions not specified Description: An Improper Certificate Validation issue exists, allowing an authenticated, privileged attacker to intercept email messages sent from Security Center via a rogue SMTP server...

GLSA-202412-07 : OpenJDK: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202412-07 OpenJDK: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenJDK. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

CBL Mariner 2.0 Security Update: php (CVE-2024-8932)

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8932 advisory. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to...

Oracle Linux 9 : redis:7 (ELSA-2024-10869)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10869 advisory. 7.2.6-1 - rebase to 7.2.6 RHEL-26628 7.0.12-1 - rebase to 7.0.12 2221899 7.0.11-1 - rebase to 7.0.11 for new redis:7 stream 2129826 7.0.11-1 - Upstrea...

Tenable Security Center < 6.5.0 Multiple Vulnerabilities (TNS-2024-19)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-19 advisory. - Security Center leverages third-party software to help provide underlying...

Cisco NX-OS Improper Input Validation (CVE-2012-4097)

The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service BGP service reset via a malformed UPDATE message, aka Bug ID CSCtn13043. This plugin only works with Tenable.ot. Please visit...

Photon OS 5.0: Linux PHSA-2024-5.0-0405

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0405. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2016-1341)

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...

Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2012-4121)

Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed 1 r and 2 w commands, aka Bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Cisco NX-OS Fibre Channel over Ethernet Denial of Service (CVE-2017-6655)

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software o...

Cisco Small Business SPA300 and SPA500 Series IP Phones Cross-site Scripting (CVE-2014-3313)

Cross-site scripting XSS vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582. This plugin only works with Tenable.ot. Please visit...

Fedora 40 : wireshark (2024-0b563ad294)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0b563ad294 advisory. New version 4.2.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 41 : mingw-glib2 (2024-67869f1cb3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-67869f1cb3 advisory. Update to 2.82.2, fixes CVE-2024-52533. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Oracle Linux 9 : webkit2gtk3 (ELSA-2024-10472)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10472 advisory. 2.46.3-2 - Add patch for CVE-2024-44309 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Fedora 40 : firefox / nss (2024-ea7b2e66a1)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-ea7b2e66a1 advisory. Update NSS to 3.106.0 Update to Firefox 133.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

RHEL 9 : perl-App-cpanminus (RHSA-2024:10218)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:10218 advisory. Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell...

Korenix JetNet Authenticated Command Injection (CVE-2020-12503)

Improper Authorization vulnerability of Korenix JetNet 5428G-20SFP, JetNet 5810G, JetNet 4706F, JetNet 4510, JetNet 5310, JetNet 4706, JetNet 5428G, JetNet 6095, JetNet 4706 are prone to multiple authenticated command injections. This plugin only works with Tenable.ot. Please visit...

Korenix JetNet Use of Hard-coded Credentials (CVE-2020-12501)

Improper Authorization vulnerability of Korenix JetNet 5428G-20SFP, JetNet 5810G, JetNet 4706F, JetNet 4510, JetNet 5310, JetNet 4706, JetNet 5428G, JetNet 6095, JetNet 4706 use undocumented accounts. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...