Lucene search
+L
OpenvasRecent

177629 matches found

OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•37 views

Ubuntu: Security Advisory (USN-7496-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.00725EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•15 views

Ubuntu: Security Advisory (USN-7489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.00191EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•12 views

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1432)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.1CVSS4.8AI score0.00613EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•22 views

Ubuntu: Security Advisory (USN-7482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS6.3AI score0.00818EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•20 views

Ubuntu: Security Advisory (USN-7495-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.00702EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•13 views

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1431)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.1CVSS4.8AI score0.00613EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2025-1411)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.2AI score0.00665EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•12 views

Ubuntu: Security Advisory (USN-7486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.5AI score0.00612EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-1405)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.7AI score0.00747EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•44 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1421)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.00829EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2025-1423)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.7AI score0.00514EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•14 views

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2025-1419)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.01292EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2025-1414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.02632EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-1418)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.2CVSS7.6AI score0.00356EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1437)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.04745EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•26 views

SUSE: Security Advisory (SUSE-SU-2025:1450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.3AI score0.0071EPSS
SaveExploits0References11
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•6 views

Do Not Enable the rsync Service

The rsync service can synchronize data between servers or between local drive partitions. However, information leakage risks exist because rsync uses non-encrypted transmission protocols. If the rsync service is enabled and data is transmitted between servers over the network, attackers can...

6.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•10 views

Ensure That All Groups Exist in /etc/passwd

All user groups in /etc/passwd must exist in the /etc/group file. If the administrator manually modifies the two files, the user groups may be incorrectly set due to human errors. If a user group in /etc/passwd does not exist in /etc/group, risks of user group permission management may occur...

6.8AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•9 views

Do Not Enable the NFS Service

The Network File System NFS is one of the earliest and most widely used file systems in UNIX environments. It allows a system to mount file systems of other servers over the network. If the system does not share content through NFS, you are advised to disable NFS to reduce the remote attack...

6.9AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•9 views

Configure the Banner Path Correctly

The banner path points to a file which contains the prompt information displayed on the client before a user logs in to the SSH. The content in the file can be configured based on the actual service scenario. If the banner path is not set, no information is displayed by default...

6.6AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•13 views

Ensure That the Password Validity Is Set Correctly

If a password is not changed for a long time, the password is vulnerable to brute force cracking, which compromises system security. If the password validity period is set too short, the password needs to be changed frequently, increasing management costs. In addition, users may fail to log in...

7AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•9 views

Do Not Use Historical Passwords

Using the same historical password frequently may cause password leakage and attacks. To ensure user security, the function of disabling historical passwords must be configured. The number of historical passwords that cannot be used must be properly set based on the actual service scenario. The...

7.1AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•3 views

Configure a Proper Value for LoginGraceTime

LoginGraceTime is used to limit the login time of a user. If a user does not complete the login within the time specified by LoginGraceTime, the connection is automatically disconnected. You are advised to set this field to a value less than or equal to 60, in seconds. If this field is set to a...

6.9AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Configure TIME_WAIT for TCP

TIMEWAIT indicates the time for TCP to wait for connection destruction. If this parameter is set to a large value, a large number of TCP connections are not closed and DoS attacks occur. You are advised to set this parameter to a value less than or equal to 60. SPDX-FileCopyrightText: 2025...

6.9AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Configure Audit Rules for Privilege-Escalated Commands

Users can call privilege-escalated commands that is, commands with SUID/SGID bits to obtain the super administrator permissions. This operation is risky and often exploited by attackers. You are advised to audit and monitor privilege-escalated commands for future tracing. By default, audit rules...

7.1AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Configure Proper Cryptographic Algorithms for the SSH Service

As cryptographic technologies develop and computing capabilities improve, some cryptographic algorithms are no longer suitable for today SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

7AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•9 views

Do Not Start the debug-shell Service

The debug-shell service is used to locate faults that occur during system boot. This service is installed with systemd. The debug-shell service requires no authentication, that is, attackers can access the root shell by simply pressing Ctrl+Alt+F9 during systemd startup when the OS is booting. Th...

7.1AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•6 views

Configure Proper Policies for INPUT of iptables

The INPUT chain is used to filter packets received from external systems. For any service provided for external systems, configure the corresponding INPUT policy and enable the related port so that external clients can access the service through the port. If the policy is not set, all packets tha...

7AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Configure Proper MACs Algorithms for the SSH Service

In cryptography, a message authentication code MAC is an authentication mechanism used by communication entities to check message integrity. If the configured algorithms are insecure, security risks increase because weak algorithms have been or are about to be cracked in the industry. The...

7.4AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•7 views

Configure the Default Policies of nftables to DROP Properly

For security purposes, the nftables base chains INPUT, OUTPUT, and FORWARD are similar to those of iptables. You need to configure the DROP policy for all packets, and then add the ACCEPT policy to the base chains to open related services and ports. If the base chains are not configured or the ho...

6.9AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•10 views

Ensure That the Session Timeout Period Is Set Correctly

Setting a proper timeout duration of sessions can reduce the risk of system attacks caused by manual operations of the administrator. To ensure ease of use of the community version in different scenarios, the session timeout interval is not configured in openEuler distributions by default...

7AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•5 views

Ensure That the Weak Password Dictionary Is Set Correctly

If a user password is weak, it is easy for attackers to guess the password or crack it through dictionary attacks in a short period of time. A weak password dictionary is a collection of passwords that are not strong enough and can be easily cracked through guesses. Weak passwords include default...

7AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•12 views

Avoid Using USB Storage

USB storage devices are usually used to transfer data between servers. However, in most cases, data on USB storage devices cannot be protected by technical methods, thereby increasing the risk of attacks. Viruses and Trojan horses on USB devices may infect and damage the server. If the USB storag...

6.9AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•6 views

Configuring the SSH Service Port Properly

A server typically has multiple NICs and IP addresses. You need to plan IP addresses to determine which ones are used for services or management. Not all IP addresses need to listen on SSH connections. You can specify only some IP addresses to perform SSH connections to reduce the attack surface...

7AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•21 views

Do Not Enable the RPC Service

The rpcbind service maps remote procedure call RPC services to the ports on which they listen. RPC processes notify rpcbind when they start and register the ports they are listening on and the RPC program numbers they expect to serve. The client system then contacts rpcbind on the server using a...

7AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•7 views

Configure Audit Rules for File Access Control Permissions

File access permission control is the basic permission management in Linux. Different users can access different files after being authorized. This prevents sensitive information leakage or file data tampering between users and prevents common users from accessing high-permission files or...

6.6AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•6 views

Disable the TCP Forwarding Function of SSH

Setting AllowTcpForwarding to no disables the SSH client from performing TCP port forwarding. TCP port forwarding is a function of transmitting data between a local host and a remote host through an SSH tunnel. By disabling this function, you can restrict the data transmission and access scope of...

6.8AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•7 views

Ensure That a User Has Its Own Home Directory

Each user must have its own home directory for storing user-related data. The owner of the home directory must be the user. If the owner of the home directory is not the user, the user cannot read or write the home directory, or the user data stored in the home directory can be read or tampered...

6.9AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•3 views

Configure a Proper Number of Queues in the SYN_RECV State

The SYNRECV queue stores the TCP connection requests that have not been confirmed by the peer end. A larger value indicates more waiting network connections. If the value is too small, the system is vulnerable to TCP SYN flood attacks. As a result, normal connections are denied. If the value is t...

6.9AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•5 views

Set the User Validity Period Correctly

The life cycle of a user must be managed based on the application scenario. For example, the life cycle of a temporarily created management or maintenance user or a user required by a periodic service ends when the service life cycle ends. These users should be deleted when their life cycles end...

6.9AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•6 views

Log Spoofing Source Routing and Redirect Packets

Logging spoofing, source routing, and redirect packets sent to the system helps discover attack sources and formulate protection measures. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

7AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•33 views

Enable TCP-SYN Cookie Protection

TCP-SYN cookie protection mitigates the impact of SYN flood attacks on the system. When an attacker launches a SYN flood attack, the half-open connection queue in the kernel is quickly exhausted to block valid connections. If SYN cookie is enabled, the system can still accept valid connections ev...

6.8AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•9 views

Do Not Install the Samba Service

The daemon of Samba allows the system administrator to configure the Linux system to share file systems and directories with Windows systems. Samba publishes file systems and directories through the Server Message Block SMB protocol. Windows users will be able to mount these directories and file...

6.8AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•7 views

Ensure That Removable Device Partitions Are Mounted Using noexec and nodev

The security of removable devices cannot be ensured completely due to a lot of factors, such as the source, usage, and transportation process. In this sense, removable devices are the main host for viruses. Therefore, removable devices must be mounted using noexec and nodev to improve security an...

6.8AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•9 views

Do Not Install the NIS Server

Network Information Service NIS works in client-server mode. NIS clients running the ypbind daemon obtain information from a server. NIS is inherently insecure and is vulnerable to DoS and buffer overflow attacks. Therefore, do not install the NIS server in the service scenario where NIS is not...

7.2AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•7 views

Do Not Install the FTP Client

File Transfer Protocol FTP is used for file transfer between a Linux server and other servers, desktop systems, as well as terminal devices. FTP does not support encrypted transmission. As a result, data can be easily stolen by attackers during transmission. Therefore, do not install FTP clients ...

7AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Do Not Install Network Sniffing Tools

If network sniffing tools exist in the production environment, attackers may use them for network analysis and attacks. Therefore, in the production environment, do not install network sniffing, packet capturing, or analysis tools, such as tcpdump, Ethereal, and Wireshark. SPDX-FileCopyrightText:...

7AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•3 views

Configure Audit Rules for Kernel Module Changes

Generally, for deployed services, the loaded kernel modules do not change. Therefore, changes in loaded kernel modules may indicate attacks. You are advised to audit and monitor kernel module changes for future tracing. By default, audit rules for kernel module changes are not configured in...

6.9AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•4 views

Ensure That Warning Banners Contain Proper Information

Warning banners contain warning information added on the system login page. Security warnings are displayed for all users who log in to the system. The security warnings must include information about the organization to which the system belongs, monitoring or records of login behavior, and legal...

6.4AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/05/07 12:00 a.m.•8 views

Restrict the Number of Historical Command Records

HISTSIZE is an environment variable used to control the size of the command history. Specifically, HISTSIZE defines the number of command entries that can be stored in the command history. By setting the value of HISTSIZE, you can limit or increase the size of the command history, thus controllin...

6.8AI score
SaveExploits0References2
Total number of security vulnerabilities177629