3620 matches found
Fedora 37 : pypy3.9 (2022-7ca361a226)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-7ca361a226 advisory. Backport fix for CVE-2021-28861 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CVE-2024-49048
TorchGeo Remote Code Execution Vulnerability...
CentOS 9 : expat-2.5.0-4.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the expat-2.5.0-4.el9 build changelog. - An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an...
Moderate: runc security update
The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes: golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 For more details about the security issues, including the impact, a CVSS score,...
Fedora 39 : squid (2024-b73b600af7)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b73b600af7 advisory. - new version 6.12 - important security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
BELL-CVE-2024-50168
Bulletin has no description...
CBL Mariner 2.0 Security Update: mysql (CVE-2024-2410)
The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2410 advisory. - The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON...
SUSE SLED15: libpython3_12-1_0 / libpython3_12-1_0-32bit / python312 / etc (SUSE-SU-2024:3959-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3959-1 advisory. - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug...
Curl 7.74.0 < 8.10.1 Input Misinterpretation (CVE-2024-9681)
The version of Curl installed on the remote host is between 7.74.0 and prior to 8.10.1. It is, therefore, affected by a potential minor DoS security problem when trying to use HTTPS when that no longer works or a cleartext transmission of data that was otherwise intended to possibly be protected...
RockyLinux 9 : edk2 (RLSA-2024:8935)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8935 advisory. openssl: Possible denial of service in X.509 name checks CVE-2024-6119 Tenable has extracted the preceding description block directly from the RockyLinux security...
ruby3.3-rubygem-actionmailer-7.0-7.0.8.6-1.1 on GA media (moderate)
ruby3.3-rubygem-actionmailer-7.0-7.0.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14471-1 Rating: moderate Cross-References: CVE-2024-47889 CVSS scores: CVE-2024-47889 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...
RockyLinux 8 : bzip2 (RLSA-2024:8922)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8922 advisory. bzip2: out-of-bounds write in function BZ2decompress CVE-2019-12900 Tenable has extracted the preceding description block directly from the RockyLinux security...
RHEL 8 : krb5 (RHSA-2024:8791)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8791 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...
docker-stable-24.0.9_ce-1.1 on GA media (moderate)
docker-stable-24.0.9ce-1.1 on GA media Announcement ID: openSUSE-SU-2024:14446-1 Rating: moderate Cross-References: CVE-2024-41110 CVSS scores: CVE-2024-41110 SUSE : 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...
Amazon Linux 2 : kernel (ALASKERNEL-5.4-2024-087)
The version of kernel installed on the remote host is prior to 5.4.284-198.382. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2024-087 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc CVE-2024-46865...
Fortinet Fortigate Security Best Practice: Antivirus evasion via malformed RAR file (FG-IR-20-037)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-037 advisory. - FortiClient and FortiOS AV engines may not immediately detect certain types of malformed or non-standard RAR archives,...
Fortinet FortiWeb Stack-Based Buffer Overflow vulnerability (FG-IR-21-119)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-119 advisory. - A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker ...
CVE-2024-10387
creationtimestamp| type| source ---|---|--- 2024-10-25 20:25:43+00:00| seen| https://t.me/cvedetector/8957 2024-10-31 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-305-01 2026-07-11 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqfawtcnq227...
