Fedora 41 : expat (2024-ccc5045ab9)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ccc5045ab9 advisory. Rebase to version 2.6.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 37 : ruby (2022-f0f6c6bec2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f0f6c6bec2 advisory. Upgrade to Ruby 3.1.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2024-43637

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:40:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471681854033023 2025-01-09 17:18:30+00:00| seen|...

[SECURITY] [DLA 3950-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3950-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 11, 2024 https://wiki.debian.org/LTS -...

DLA-3949-1 ruby-saml - security update

Bulletin has no description...

PT-2024-8476

The vulnerable software is 7-Zip, a widely used file compression utility. The issue arises from an integer underflow in the Zstandard decompression implementation, allowing remote attackers to execute arbitrary code on affected installations of 7-Zip by crafting specially designed archive files. ...

docker-stable-24.0.9_ce-1.1 on GA media (moderate)

docker-stable-24.0.9ce-1.1 on GA media Announcement ID: openSUSE-SU-2024:14446-1 Rating: moderate Cross-References: CVE-2024-41110 CVSS scores: CVE-2024-41110 SUSE : 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

PT-2024-27558 · Wpmu Dev · Wpmu Dev Defender Security

Name of the Vulnerable Software and Affected Versions: WPMU DEV Defender Security versions through 4.7.1 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions through 4.7.1,...

Fedora 40 : micropython (2024-f9ca680ecd)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f9ca680ecd advisory. Update to 1.23.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

python310-pytest-html-4.1.1-3.1 on GA media (moderate)

python310-pytest-html-4.1.1-3.1 on GA media Announcement ID: openSUSE-SU-2024:14433-1 Rating: moderate Cross-References: CVE-2024-48948 CVSS scores: CVE-2024-48948 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2024-48948 SUSE : 6.3...

DSA-5799-1 chromium - security update

Bulletin has no description...

podman-5.2.4-3.1 on GA media (moderate)

podman-5.2.4-3.1 on GA media Announcement ID: openSUSE-SU-2024:14420-1 Rating: moderate Cross-References: CVE-2024-9676 CVSS scores: CVE-2024-9676 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-9676 SUSE : 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

buildah-1.37.4-2.1 on GA media (moderate)

buildah-1.37.4-2.1 on GA media Announcement ID: openSUSE-SU-2024:14405-1 Rating: moderate Cross-References: CVE-2024-9675 CVSS scores: CVE-2024-9675 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2024-9675 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N...

nodejs-electron-31.7.1-1.1 on GA media (moderate)

nodejs-electron-31.7.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14410-1 Rating: moderate Cross-References: CVE-2024-9602 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2024-47522

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, invalid ALPN in TLS/QUIC traffic when JA4 matching/logging is enabled can lead to Suricata aborting with a panic. This issue has been addressed in 7.0.7. O...

CVE-2024-43517

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review 2026-07-06 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpxvhl5afl2v...

CVE-2024-43501

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...

RHSA-2024:4597 Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update

Bulletin has no description...

php8-8.3.12-1.1 on GA media (moderate)

php8-8.3.12-1.1 on GA media Announcement ID: openSUSE-SU-2024:14376-1 Rating: moderate Cross-References: CVE-2024-4577 CVE-2024-8925 CVE-2024-8927 CVE-2024-9026 CVSS scores: CVE-2024-4577 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that...

MGASA-2024-0319 Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, & java-latest-openjdk packages fix security vulnerabilities

Potential UTF8 size overflow. CVE-2024-21131 Excessive symbol length can lead to infinite loop. CVE-2024-21138 Range Check Elimination RCE pre-loop limit overflow. CVE-2024-21140 Pack200 increase loading time due to improper header validation. CVE-2024-21144 Out-of-bounds access in 2D image...