The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1926 advisory.

  - buildah: Crafted input tar file may lead to local file overwrite during image build process     (CVE-2020-10696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2637 advisory.

  - gnutls: session resumption works without master key allowing MITM (CVE-2020-13777)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4743 advisory.

  - squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)

  - squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)

  - squid: Improper input validation in URI processor (CVE-2019-12523)

  - squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)

  - squid: Heap overflow issue in URN processing (CVE-2019-12526)

  - squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)

  - squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)

  - squid: Denial of service in cachemgr.cgi (CVE-2019-12854)

  - squid: Buffer overflow in URI processor (CVE-2019-18676)

  - squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)

  - squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)

  - squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)

  - squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour     (CVE-2019-18860)

  - squid: DoS in TLS handshake (CVE-2020-14058)

  - squid: Request smuggling and poisoning attack against the HTTP cache (CVE-2020-15049)

  - squid: Improper input validation could result in a DoS (CVE-2020-24606)

  - squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)

  - squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4553 advisory.

  - systemd: memory leak in button_open() in login/logind-button.c when udev events are received     (CVE-2019-20386)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1686 advisory.

  - libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1828 advisory.

  - glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries (CVE-2019-19126)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4445 advisory.

  - librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer     overflow (CVE-2019-18609)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2902 advisory.

  - sane-backends: Heap buffer overflow in epsonds_net_read in epsonds-net.c (CVE-2020-12861)

  - sane-backends: Heap buffer overflow in esci2_img (CVE-2020-12865)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5237 advisory.

  - Mozilla: Variable time processing of cross-origin images during drawImage calls (CVE-2020-16012)

  - Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code     (CVE-2020-26951)

  - Mozilla: Fullscreen could be enabled without displaying the security UI (CVE-2020-26953)

  - Mozilla: XSS through paste (manual and clipboard API) (CVE-2020-26956)

  - Mozilla: Requests intercepted through ServiceWorkers lacked MIME type restrictions (CVE-2020-26958)

  - Mozilla: Use-after-free in WebRequestService (CVE-2020-26959)

  - Mozilla: Potential use-after-free in uses of nsTArray (CVE-2020-26960)

  - Mozilla: DoH did not filter IPv4 mapped IP Addresses (CVE-2020-26961)

  - Mozilla: Software keyboards may have remembered typed passwords (CVE-2020-26965)

  - Mozilla: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5 (CVE-2020-26968)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0003 advisory.

  - kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c     (CVE-2020-25211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4763 advisory.

  - dovecot: command followed by sufficient number of newlines leads to use-after-free (CVE-2020-10958)

  - dovecot: sending mail with empty quoted localpart leads to DoS (CVE-2020-10967)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1980 advisory.

  - git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak     (CVE-2020-11008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4638 advisory.

  - sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c (CVE-2019-16167)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0920 advisory.

  - libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow     (CVE-2019-15690)

  - libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in     HandleCursorShape function (CVE-2019-20788)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3662 advisory.

  - php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers() (CVE-2019-11039)

  - php: Buffer over-read in exif_read_data() (CVE-2019-11040)

  - php: Heap buffer over-read in exif_scan_thumbnail() (CVE-2019-11041)

  - php: Heap buffer over-read in exif_process_user_comment() (CVE-2019-11042)

  - php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at     that byte (CVE-2019-11045)

  - php: Information disclosure in exif_read_data() (CVE-2019-11047)

  - php: Integer wraparounds when receiving multipart forms (CVE-2019-11048)

  - php: Out of bounds read when parsing EXIF information (CVE-2019-11050)

  - oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)

  - oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)

  - oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)

  - oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)

  - oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c     (CVE-2019-19204)

  - oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c (CVE-2019-19246)

  - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

  - php: Out of bounds read in php_strip_tags_ex (CVE-2020-7059)

  - php: Global buffer-overflow in mbfl_filt_conv_big5_wchar function (CVE-2020-7060)

  - php: NULL pointer dereference in PHP session upload progress (CVE-2020-7062)

  - php: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)

  - php: Information disclosure in exif_read_data() function (CVE-2020-7064)

  - php: Using mb_strtolower() function with UTF-32LE encoding leads to potential code execution     (CVE-2020-7065)

  - php: Information disclosure in function get_headers (CVE-2020-7066)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2614 advisory.

  - Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398)

  - Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405)

  - Mozilla: JavaScript Type confusion with NativeTypes (CVE-2020-12406)

  - Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 (CVE-2020-12410)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1665 advisory.

  - qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service (CVE-2018-19869)

  - qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871)

  - qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2450 advisory.

  - dotnet: Denial of service via untrusted input (CVE-2020-1108)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2143 advisory.

  - dotnet: Denial of service via untrusted input (CVE-2020-1108)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1715 advisory.

  - dnsmasq: memory leak in the create_helper() function in /src/helper.c (CVE-2019-14834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2852 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)

  - nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a     constructor or __proto__ payload (CVE-2020-7598)

  - nodejs: TLS session reuse can lead to hostname verification bypass (CVE-2020-8172)

  - nodejs: memory corruption in napi_get_value_string_* functions (CVE-2020-8174)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0329 advisory.

  - golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling     (CVE-2019-16276)

  - golang: invalid public key causes panic in dsa.Verify (CVE-2019-17596)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0274 advisory.

  - openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor() (CVE-2020-6851)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0919 advisory.

  - usrsctp: Out of bounds reads in sctp_load_addresses_from_init() (CVE-2019-20503)

  - Mozilla: Use-after-free when removing data about origins (CVE-2020-6805)

  - Mozilla: BodyStream::OnInputStreamReady was missing protections against state confusion (CVE-2020-6806)

  - Mozilla: Use-after-free in cubeb during stream destruction (CVE-2020-6807)

  - Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially     leading to command injection (CVE-2020-6811)

  - Mozilla: The names of AirPods with personally identifiable information were exposed to websites with     camera or microphone permission (CVE-2020-6812)

  - Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6 (CVE-2020-6814)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1998 advisory.

  - gnutls: DTLS client hello contains a random value of all zeroes (CVE-2020-11501)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1912 advisory.

  - bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized     pairing of Bluetooth devices (CVE-2018-10910)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5393 advisory.

  - libexif: out of bounds write due to an integer overflow in exif-entry.c (CVE-2020-0452)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4667 advisory.

  - mailman: XSS via file attachments in list archives (CVE-2020-12137)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4545 advisory.

  - libssh: unsanitized location in scp could lead to unwanted command execution (CVE-2019-14889)

  - libssh: denial of service when handling AES-CTR (or DES) ciphers (CVE-2020-1730)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0902 advisory.

  - ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1653 advisory.

  - zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3658 advisory.

  - librepo: missing path validation in repomd.xml may lead to directory traversal (CVE-2020-14352)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4482 advisory.

  - libgcrypt: ECDSA timing attack allowing private key leak (CVE-2019-13627)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0130 advisory.

  - dotnet: Denial of service via backpressure issue (CVE-2020-0602)

  - dotnet: Memory Corruption in SignalR (CVE-2020-0603)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:0089 advisory.

  - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (CVE-2020-16044)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1688 advisory.

  - libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c (CVE-2019-14973)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0512 advisory.

  - Mozilla: Missing bounds check on shared memory read in the parent process (CVE-2020-6796)

  - Mozilla: Incorrect parsing of template tag could result in JavaScript injection (CVE-2020-6798)

  - Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 (CVE-2020-6800)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1916 advisory.

  - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)

  - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure     (CVE-2018-20060)

  - python-urllib3: CRLF injection due to not encoding the '\r ' sequence leading to possible attack on     internal service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory.

  - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS (CVE-2020-24553)

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

  - golang: malicious symbol names can lead to code execution at build time (CVE-2020-28366)

  - golang: improper validation of cgo flags can lead to code execution at build time (CVE-2020-28367)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5085 advisory.

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0094 advisory.

  - dotnet: ASP.NET Core Callbacks outside of locks cause Krestel deadlock when using HTTP2 (CVE-2021-1723)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1827 advisory.

  - libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c (CVE-2018-14404)

  - libxml2: infinite loop in xz_decomp function in xzlib.c (CVE-2018-9251)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0981 advisory.

  - ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c (CVE-2020-5208)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1932 advisory.

  - buildah: Crafted input tar file may lead to local file overwrite during image build process     (CVE-2020-10696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4952 advisory.

  - freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4655 advisory.

  - cyrus-imapd: privilege escalation in HTTP request (CVE-2019-18928)

  - cyrus-imapd: lmtpd component created mailboxes with administrator privileges if the fileinto was used,     bypassing ACL checks (CVE-2019-19783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5480 advisory.

  - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution     (CVE-2020-15862)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4317 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 (CVE-2020-15683)

  - chromium-browser: Use after free in WebRTC (CVE-2020-15969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:5398 advisory.

  - Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes (CVE-2020-26970)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4619 advisory.

  - frr: default permission issue eases information leaks (CVE-2020-12831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
145971	CentOS 8 : container-tools:1.0 (CESA-2020:1926)	high
145970	CentOS 8 : gnutls (CESA-2020:2637)	high
145969	CentOS 8 : squid:4 (CESA-2020:4743)	critical
145968	CentOS 8 : systemd (CESA-2020:4553)	low
145967	CentOS 8 : libmspack (CESA-2020:1686)	medium
145966	CentOS 8 : glibc (CESA-2020:1828)	low
145965	CentOS 8 : librabbitmq (CESA-2020:4445)	critical
145964	CentOS 8 : sane-backends (CESA-2020:2902)	high
145963	CentOS 8 : firefox (CESA-2020:5237)	high
145962	CentOS 8 : kernel (CESA-2021:0003)	medium
145961	CentOS 8 : dovecot (CESA-2020:4763)	medium
145960	CentOS 8 : git (CESA-2020:1980)	high
145959	CentOS 8 : sysstat (CESA-2020:4638)	medium
145958	CentOS 8 : libvncserver (CESA-2020:0920)	critical
145957	CentOS 8 : php:7.3 (CESA-2020:3662)	critical
145956	CentOS 8 : thunderbird (CESA-2020:2614)	high
145955	CentOS 8 : qt5 (CESA-2020:1665)	medium
145954	CentOS 8 : .NET Core 3.1 on Red Hat Enterprise Linux 8 (CESA-2020:2450)	high
145953	CentOS 8 : .NET Core (CESA-2020:2143)	high
145952	CentOS 8 : dnsmasq (CESA-2020:1715)	low
145951	CentOS 8 : nodejs:12 (CESA-2020:2852)	high
145950	CentOS 8 : go-toolset:rhel8 (CESA-2020:0329)	high
145949	CentOS 8 : openjpeg2 (CESA-2020:0274)	high
145948	CentOS 8 : thunderbird (CESA-2020:0919)	critical
145947	CentOS 8 : gnutls (CESA-2020:1998)	high
145946	CentOS 8 : bluez (CESA-2020:1912)	low
145945	CentOS 8 : libexif (CESA-2020:5393)	critical
145944	CentOS 8 : mailman:2.1 (CESA-2020:4667)	medium
145943	CentOS 8 : libssh (CESA-2020:4545)	high
145942	CentOS 8 : icu (CESA-2020:0902)	high
145941	CentOS 8 : zziplib (CESA-2020:1653)	medium
145940	CentOS 8 : librepo (CESA-2020:3658)	high
145939	CentOS 8 : libgcrypt (CESA-2020:4482)	medium
145938	CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)	high
145937	CentOS 8 : thunderbird (CESA-2021:0089)	high
145936	CentOS 8 : libtiff (CESA-2020:1688)	medium
145935	CentOS 8 : firefox (CESA-2020:0512)	high
145934	CentOS 8 : python-pip (CESA-2020:1916)	critical
145933	CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)	high
145932	CentOS 8 : microcode_ctl (CESA-2020:5085)	medium
145931	CentOS 8 : dotnet5.0 (CESA-2021:0094)	high
145930	CentOS 8 : libxml2 (CESA-2020:1827)	high
145929	CentOS 8 : ipmitool (CESA-2020:0981)	high
145928	CentOS 8 : container-tools:rhel8 (CESA-2020:1932)	high
145927	CentOS 8 : freetype (CESA-2020:4952)	critical
145926	CentOS 8 : cyrus-imapd (CESA-2020:4655)	critical
145925	CentOS 8 : net-snmp (CESA-2020:5480)	high
145924	CentOS 8 : firefox (CESA-2020:4317)	critical
145923	CentOS 8 : thunderbird (CESA-2020:5398)	high
145922	CentOS 8 : frr (CESA-2020:4619)	medium

Detections

Analytics

CentOS Local Security Checks Family for Nessus

high

high

critical

low

medium

low

critical

high

high

medium

medium

high

medium

critical

critical

high

medium

high

high

low

high

high

high

critical

high

low

critical

medium

high

high

medium

high

medium

high

high

medium

high

critical

high

medium

high

high

high

high

critical

critical

high

critical

high

medium