366284 matches found
EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1154)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be...
Oracle Linux 7 : kernel (ELSA-2017-1308)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1308 advisory. - net packet: fix overflow in check for tpreserve Hangbin Liu 1441171 1441172 CVE-2017-7308 - net packet: fix overflow in check for tpframenr Hangbin L...
SUSE SLES12 Security Update : kernel (SUSE-SU-2016:3111-1)
This update for the Linux Kernel 3.12.51-5231 fixes several issues. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...
Amazon Linux AMI : kernel (ALAS-2016-703)
The Linux kernel did not properly suppress hugetlbfs support in x86 PV guests, which could allow local PV guest users to cause a denial of service guest OS crash by attempting to access a hugetlbfs mapped area. CVE-2016-3961 / XSA-174 A flaw was found in the way the Linux kernel's ASN.1 DER decod...
OracleVM 3.3 : kernel-uek (OVMSA-2015-0150)
The remote OracleVM system is missing necessary patches to address critical security updates : - ipc/sem.c: fully initialize semarray before making it visible Manfred Spraul Orabug: 22277382 CVE-2015-7613 - ipc: fix msg newqueue add Guru Anbalagane Orabug: 22277382 CVE-2015-7613 - sctp: fix race ...
CentOS 6 : kernel (CESA-2015:1272)
Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the seventh regular update. Red Hat Product Security has rated thi...
Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x, SL7.x i386/x86_64 (20150715) (Bar Mitzvah) (Logjam)
Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733 A flaw was fou...
RHEL 6 : php (RHSA-2015:1218)
Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...
F5 Networks BIG-IP : Path MTU discovery vulnerability (K15792)
Multiple TCP/IP and ICMP implementations, when using Path MTU PMTU discovery PMTUD, allow remote attackers to cause a denial of service network throughput reduction for TCP connections via forged ICMP 'Fragmentation Needed and Don't Fragment was Set' packets with a low next-hop MTU value, aka the...
Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x, SL7.x i386/x86_64 (20150126) (POODLE)
A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions. CVE-2014-6601 Multiple improper permission check issues were discovered in the JAX-WS, and...
CentOS 6 : java-1.8.0-openjdk (CESA-2015:0069) (POODLE)
Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
Oracle Solaris Third-Party Patch Update : ntp (cve_2013_5211_input_validation)
The remote Solaris system is missing necessary patches to address security updates : - The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests, as exploite...
OracleVM 2.2 : openssl (OVMSA-2014-0007)
The remote OracleVM system is missing necessary patches to address critical security updates : - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability - replace expired GlobalSign Root CA certificate in ca-bundle.crt - fix for CVE-2013-0169 - SSL/TLS CBC timing attack 907589 - fix for CVE-2013-0166 ...
Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10629)
According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - An error exists in the ssl3readbytes function that permits data to be injected into other sessions or allows denial of service attacks. Note that this...
openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-4458)
Mozilla Thunderbird was updated to the 3.1.10 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...
SuSE 11.3 Security Update : IBM Java 6 (SAT Patch Number 9256)
BM Java 6 was updated to version 6 SR16 to fix several security issues and various other bugs. More information can be found at: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2012-1037)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1037 advisory. - Update to PostgreSQL 8.4.12, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-12.html including the fixes for...
Oracle Linux 3 / 4 : seamonkey (ELSA-2008-0599)
From Red Hat Security Advisory 2008:0599 : Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 16th July 2008 The original se...
Oracle Linux 4 : kernel (ELSA-2007-0488)
From Red Hat Security Advisory 2007:0488 : Updated kernel packages that fix several security issues and bugs in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kerne...
Oracle Linux 6 : kernel (ELSA-2011-1350)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1350 advisory. - Revert: net ipv6: make fragment identifications less predictable Jiri Pirko 723432 723433 CVE-2011-2699 - x86 perf, x86: Fix Intel fixed counters bas...
Fedora 18 : seamonkey-2.14-1.fc18 (2012-18894)
Update to 2.14 Fix CVE-2012-5830, CVE-2012-5833, CVE-2012-5835, CVE-2012-4212-4218, CVE-2012-5829, CVE-2012-5839, CVE-2012-5840, CVE-2012-5836, CVE-2012-4202, CVE-2012-5842, CVE-2012-5843 and others, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that...
SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 2080)
This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness. CVE-2009-0217 - XPM Import Integer Overflow. CVE-2009-2949 - GIF Import Heap Overflow. CVE-2009-2950 - MS Word sprmTDefTable Memory Corruption. CVE-2009-3301 - MS Word sprmTDefTable Memory...
RHEL 4 / 5 : thunderbird (RHSA-2010:0780)
The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0780 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content...
Fedora 13 : seamonkey-2.0.4-1.fc13 (2010-6236)
Update to new upstream SeaMonkey version 2.0.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/seamonkey20.htmlseamonkey2.0.4 CVE-2010-0173 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178...
openSUSE Security Update : libltdl-3 (libltdl-3-1638)
libtool: libltdl may load modules from the current working directory. CVE-2009-3736 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libltdl-3-1638. The text...
Fedora 11 : kernel-2.6.29.5-191.fc11 (2009-6768)
Update to kernel 2.6.29.5: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.5 Includes DRM modesetting bug fixes. Adds driver for VIA SD/MMC controllers and full support for the Nano processor in 64-bit mode. Note that Tenable Network Security has extracted the preceding description...
Apache Struts 2 devMode Information Disclosure
The remote web server is using Apache Struts 2, a web application framework for developing Java EE web applications. The version of Apache Struts 2 installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web...
RunCMS Multiple Script bbPath Parameter Remote File Inclusion
The installed version of RunCMS fails to validate user input to the 'bbPath' parameter of two scripts. An unauthenticated attacker may be able to leverage this issue to view arbitrary files on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts. Note that...
Security Update for Microsoft ASP.NET Core (June 2026)
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by the following vulnerability as referenced in the vendor advisory. - Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network...
OS Fingerprints Detected
Using a combination of remote probes TCP/IP, SMB, HTTP, NTP, SNMP, etc, it was possible to gather one or more fingerprints from the remote system. While the highest-confidence result was reported in plugin 11936, âOS Identificationâ, the complete set of fingerprints detected are reported here...
Oracle MySQL Workbench <= 8.0.32 (April 2023)
The version of Oracle MySQL Workbench installed on the remote Windows host is prior to 8.0.32. It is, therefore, affected by a Use After Free vulnerability in the MySQL Workbench product of Oracle MySQL component: Workbench: OpenSSL. Supported versions that are affected are 8.0.32 and prior. Easi...
EulerOS 2.0 SP3 : httpd (EulerOS-SA-2022-1730)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The Apache httpd...
IBM Java 6.0 < 6.0.16.70 / 6.1 < 6.1.8.70 / 7.0 < 7.0.10.30 / 7.1 < 7.1.4.30 / 8.0 < 8.0.5.20 Multiple Vulnerabilities (Jul 17, 2018)
The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.70 / 6.1 6.1.8.70 / 7.0 7.0.10.30 / 7.1 7.1.4.30 / 8.0 8.0.5.20. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle July 17 2018 CPU advisory. - Vulnerability in the Java SE, Java SE Embedd...
RHEL 8 : openssl (RHSA-2022:1065)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1065 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
WordPress 5.9.x < 5.9.2 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A stored cross-site scripting XSS vulnerability exists via wpfilterglobalstylespost. - A prototype pollution exists via the Gutenberg wordpress/url package. Note that the...
CentOS 7 : httpd (RHSA-2021:3856)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3856 advisory. - A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server...
NewStart CGSL CORE 5.05 / MAIN 5.05 : python3 Multiple Vulnerabilities (NS-SA-2021-0147)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has python3 packages installed that are affected by multiple vulnerabilities: - The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the servertitle field. This occur...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4999-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4999-1 advisory. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A...
SUSE SLED15: postgresql10 / postgresql10-contrib / postgresql10-devel / etc (SUSE-SU-2021:1970-1)
The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1970-1 advisory. - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028:...
Debian DLA-2647-1 : bind9 security update
Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2021-25214 Greg Kuechle discovered that a malformed incoming IXFR transfer could trigger an assertion failure in named, resulting in denial of service. CVE-2021-25215 Siva Kakarla discovered that named could crash...
Ubuntu 18.04 LTS / 20.04 LTS : Django vulnerability (USN-4742-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4742-1 advisory. It was discovered that Django incorrectly accepted semicolons as query parameters. A remote attacker could possibly use this issue to perform a Web...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4427-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4427-1 advisory. It was discovered that the Kvaser CAN/USB driver in the Linux kernel did not properly initialize memory in certain situations. A local attacker could...
RHEL 8 : firefox (RHSA-2020:2382)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2382 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Security Updates for Windows Defender (April 2020)
The engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.2001.112. It is, therefore, affected by a hard link elevation of privilege vulnerability which could allow an attacker who successfully exploited this vulnerability to elevate privileges on the...
Debian DSA-4571-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code or denial of service. Debian follows the Thunderbird upstream releases. Support for the 60.x series has ended, so starting with this update we're now following the 68.x...
EulerOS 2.0 SP8 : python2 (EulerOS-SA-2019-2114)
According to the versions of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the servertitle field. This...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4163-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4163-1 advisory. It was discovered that a race condition existed in the ARC EMAC ethernet driver for the Linux kernel, resulting in a use-after-free vulnerability. An...
Fedora 31 : 1:openssl (2019-9ab7ee6309)
Minor update release 1.1.1d with low impact security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
LibreOffice < 6.2.7 / 6.3.x < 6.3.1 Directory Traversal (macOS)
The version of LibreOffice installed on the remote macOS host is prior to 6.2.7 or 6.3.x prior to 6.3.1. It is, therefore, affected by a directory traversal vulnerability. This is due to a feature in LibreOffice which allows documents to specify pre-installed macros that can be executed on variou...
EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1639)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment SACK segments. Whil...