RHEL 7 : java-1.8.0-openjdk (RHSA-2024:8116)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8116 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_166-default / etc (SUSE-SU-2024:3648-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3648-1 advisory. This update for the Linux Kernel 5.3.18-15020024166 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed...

SUSE SLES15 Security Update : kernel (Live Patch 15 for SLE 15 SP5) (SUSE-SU-2024:3702-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3702-1 advisory. This update for the Linux Kernel 5.14.21-1505005568 fixes several issues. The following security issues were fixed: - CVE-2024-36899: gpiolib:...

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2024-8127)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8127 advisory. 1:21.0.5.0.10-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.5.0.10-3 - Sync the copy of the portable specfile with the latest update -...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_191-default / etc (SUSE-SU-2024:3685-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3685-1 advisory. This update for the Linux Kernel 5.3.18-15020024191 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed...

SUSE SLES12 Security Update : kernel (Live Patch 57 for SLE 12 SP5) (SUSE-SU-2024:3674-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3674-1 advisory. This update for the Linux Kernel 4.12.14-122219 fixes several issues. The following security issues were fixed: - CVE-2024-41059: hfsplus: fix...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7073-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7073-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

SUSE SLES15 Security Update : kernel (Live Patch 6 for SLE 15 SP5) (SUSE-SU-2024:3655-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3655-1 advisory. This update for the Linux Kernel 5.14.21-1505005531 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed...

Slackware Linux 15.0 mozilla-thunderbird Vulnerability (SSA:2024-290-02)

The version of mozilla-thunderbird installed on the remote host is prior to 115.16.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-290-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the...

SUSE SLES12 Security Update : kernel (Live Patch 48 for SLE 12 SP5) (SUSE-SU-2024:3687-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3687-1 advisory. This update for the Linux Kernel 4.12.14-122176 fixes several issues. The following security issues were fixed: - CVE-2024-41059: hfsplus: fix...

SUSE SLES15 Security Update : kernel (Live Patch 42 for SLE 15 SP3) (SUSE-SU-2024:3651-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3651-1 advisory. This update for the Linux Kernel 5.3.18-15030059153 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed...

Qnap QTS OS Command Injection (CVE-2023-41282)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596...

Qnap QTS Command Injection (CVE-2018-14746)

Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to run arbitrary commands on the NAS. This plugin only works with Tenable.ot. Please visit...

Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2018-14749)

Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...

RHEL 8 : fence-agents (RHSA-2024:8170)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8170 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

Qnap QTS Classic Buffer Overflow (CVE-2023-45044)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

Qnap QTS OS Command Injection (CVE-2023-23368)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later...

Qnap QTS OS Command Injection (CVE-2023-34979)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790...

SUSE SLES15 Security Update : kernel RT (Live Patch 7 for SLE 15 SP5) (SUSE-SU-2024:3624-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3624-1 advisory. This update for the Linux Kernel 5.14.21-1505001324 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed...

Qnap QTS Cross-site Scripting (CVE-2024-21897)

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...