The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0111 advisory.

  - Mozilla: Bypass of @namespace CSS sanitization during pasting (CVE-2019-17016)

  - Mozilla: Type Confusion in XPCVariant.cpp (CVE-2019-17017)

  - Mozilla: CSS sanitization does not escape HTML tags (CVE-2019-17022)

  - Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 (CVE-2019-17024)

  - Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5503 advisory.

  - mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

  - mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

  - mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752, CVE-2020-2922)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3241 advisory.

  - Mozilla: Potential leak of redirect targets when loading scripts in a worker (CVE-2020-15652)

  - Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11 (CVE-2020-15659)

  - chromium-browser: Use after free in ANGLE (CVE-2020-6463)

  - chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4682 advisory.

  - grafana: XSS vulnerability via a column style on the Dashboard > Table Panel screen (CVE-2018-18624)

  - grafana: arbitrary file read via MySQL data source (CVE-2019-19499)

  - grafana: stored XSS (CVE-2020-11110)

  - grafana: XSS annotation popup vulnerability (CVE-2020-12052)

  - grafana: XSS via column.title or cellLinkTooltip (CVE-2020-12245)

  - grafana: information disclosure through world-readable /var/lib/grafana/grafana.db (CVE-2020-12458)

  - grafana: information disclosure through world-readable grafana configuration files (CVE-2020-12459)

  - grafana: XSS via the OpenTSDB datasource (CVE-2020-13430)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4432 advisory.

  - python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py     (CVE-2019-20916)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2972 advisory.

  - OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)     (CVE-2020-14556)

  - OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)     (CVE-2020-14577)

  - OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731) (CVE-2020-14578)

  - OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736) (CVE-2020-14579)

  - OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)     (CVE-2020-14583)

  - OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) (CVE-2020-14593)

  - OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature     (JAXP, 8242136) (CVE-2020-14621)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4709 advisory.

  - librsvg: Resource exhaustion via crafted SVG file with nested patterns (CVE-2019-20446)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4694 advisory.

  - containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters     (CVE-2020-10749)

  - QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

  - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2102 advisory.

  - Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause     kernel panic (CVE-2020-10711)

  - Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation     (CVE-2020-11884)

  - Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources (CVE-2020-2732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0271 advisory.

  - libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the     decompression of an archive entry (CVE-2019-18408)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4756 advisory.

  - varnish: denial of service handling certain crafted HTTP/1 requests (CVE-2019-15892)

  - varnish: not clearing pointer between two client requests leads to information disclosure (CVE-2019-20637)

  - varnish: remote clients may cause Varnish to assert and restart which could result in DoS (CVE-2020-11653)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4687 advisory.

  - oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack     (CVE-2020-10737)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3634 advisory.

  - Mozilla: Attacker-induced prompt for extension installation (CVE-2020-15664)

  - Mozilla: Use-After-Free when aborting an operation (CVE-2020-15669)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2954 advisory.

  - dotnet: XML source markup processing remote code execution (CVE-2020-1147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:2897 advisory.

  - jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c (CVE-2020-12268)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2046 advisory.

  - Mozilla: Use-after-free during worker shutdown (CVE-2020-12387)

  - Mozilla: Arbitrary local file access with 'Copy as cURL' (CVE-2020-12392)

  - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 (CVE-2020-12395)

  - Mozilla: Sender Email Address Spoofing using encoded Unicode characters (CVE-2020-12397)

  - usrsctp: Buffer overflow in AUTH chunk input validation (CVE-2020-6831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2641 advisory.

  - grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send     HTTP requests to any URL (CVE-2020-13379)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4542 advisory.

  - cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1702 advisory.

  - rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c (CVE-2019-17041)

  - rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c (CVE-2019-17042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5562 advisory.

  - chromium-browser: Uninitialized Use in V8 (CVE-2020-16042)

  - Mozilla: Heap buffer overflow in WebGL (CVE-2020-26971)

  - Mozilla: CSS Sanitizer performed incorrect sanitization (CVE-2020-26973)

  - Mozilla: Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free (CVE-2020-26974)

  - Mozilla: Internal network hosts could have been probed by a malicious webpage (CVE-2020-26978)

  - Mozilla: The proxy.onRequest API did not catch view-source URLs (CVE-2020-35111)

  - Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 (CVE-2020-35113)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0633 advisory.

  - ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4649 advisory.

  - evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4643 advisory.

  - poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc     (CVE-2019-14494)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4634 advisory.

  - libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c (CVE-2019-17546)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1631 advisory.

  - libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4469 advisory.

  - cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c (CVE-2020-3898)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:0559 advisory.

  - ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5487 advisory.

  - pacemaker: ACL restrictions bypass (CVE-2020-25654)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4659 advisory.

  - gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)

  - gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

  - gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5476 advisory.

  - openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4844 advisory.

  - fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4465 advisory.

  - binutils: denial of service via crafted ELF file (CVE-2019-17450)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1605 advisory.

  - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)

  - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure     (CVE-2018-20060)

  - python: Cookie domain check returns incorrect results (CVE-2018-20852)

  - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on     internal service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

  - python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

  - python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4689 advisory.

  - openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3665 advisory.

  - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

  - golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)

  - golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs     (CVE-2020-16845)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1913 advisory.

  - e2fsprogs: Crafted ext4 partition leads to out-of-bounds write (CVE-2019-5094)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1804 advisory.

  - sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user     (CVE-2019-19232)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1581 advisory.

  - wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840)

  - wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841)

  - wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315)

  - wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317)

  - wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319)

  - wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4433 advisory.

  - python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

  - python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)

  - python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422)

  - python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS (CVE-2020-8492)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3669 advisory.

  - postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

  - postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164)

  - postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

  - postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

  - postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

  - postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4479 advisory.

  - libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)

  - libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)

  - libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4436 advisory.

  - fwupd: Possible bypass in signature verification (CVE-2020-10759)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2755 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3280 advisory.

  - nss: Use-after-free in sftk_FreeSession due to improper refcounting (CVE-2019-11756)

  - nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)

  - nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state (CVE-2019-17023)

  - nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4508 advisory.

  - libsolv: out-of-bounds read in repodata_schema2id in repodata.c (CVE-2019-20387)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1878 advisory.

  - samba: Combination of parameters and permissions can allow user to escape from the share path definition     (CVE-2019-10197)

  - samba: smb client vulnerable to filenames containing path separators (CVE-2019-10218)

  - samba: Crash after failed character conversion at log level 3 or above (CVE-2019-14907)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4568 advisory.

  - samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and     paged_results (CVE-2020-10730)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1880 advisory.

  - ibus: missing authorization allows local attacker to access the input bus of another user (CVE-2019-14822)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4670 advisory.

  - jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  - bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  - bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  - bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  - bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

  - bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

  - jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or     property injection (CVE-2019-11358)

  - bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  - jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  - ipa: No password length restriction leads to denial of service (CVE-2020-1722)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory.

  - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
145921	CentOS 8 : firefox (CESA-2020:0111)	high
145920	CentOS 8 : mariadb-connector-c (CESA-2020:5503)	high
145919	CentOS 8 : firefox (CESA-2020:3241)	high
145918	CentOS 8 : grafana (CESA-2020:4682)	medium
145917	CentOS 8 : python-pip (CESA-2020:4432)	high
145916	CentOS 8 : java-1.8.0-openjdk (CESA-2020:2972)	high
145915	CentOS 8 : librsvg2 (CESA-2020:4709)	medium
145914	CentOS 8 : container-tools:rhel8 (CESA-2020:4694)	medium
145913	CentOS 8 : kernel (CESA-2020:2102)	high
145912	CentOS 8 : libarchive (CESA-2020:0271)	high
145911	CentOS 8 : varnish:6 (CESA-2020:4756)	high
145910	CentOS 8 : oddjob (CESA-2020:4687)	medium
145909	CentOS 8 : thunderbird (CESA-2020:3634)	high
145908	CentOS 8 : .NET Core 3.1 (CESA-2020:2954)	high
145907	CentOS 8 : jbig2dec (CESA-2020:2897)	critical
145906	CentOS 8 : thunderbird (CESA-2020:2046)	critical
145905	CentOS 8 : grafana (CESA-2020:2641)	high
145904	CentOS 8 : cryptsetup (CESA-2020:4542)	high
145903	CentOS 8 : rsyslog (CESA-2020:1702)	critical
145902	CentOS 8 : firefox (CESA-2020:5562)	high
145901	CentOS 8 : ppp (CESA-2020:0633)	critical
145900	CentOS 8 : evolution (CESA-2020:4649)	medium
145899	CentOS 8 : poppler (CESA-2020:4643)	high
145898	CentOS 8 : libtiff (CESA-2020:4634)	high
145897	CentOS 8 : GStreamer, libmad, and SDL (CESA-2020:1631)	critical
145896	CentOS 8 : cups (CESA-2020:4469)	high
145895	CentOS 8 : ksh (CESA-2020:0559)	high
145894	CentOS 8 : pacemaker (CESA-2020:5487)	high
145893	CentOS 8 : gd (CESA-2020:4659)	critical
145892	CentOS 8 : openssl (CESA-2020:5476)	medium
145891	CentOS 8 : fontforge (CESA-2020:4844)	high
145890	CentOS 8 : binutils (CESA-2020:4465)	medium
145889	CentOS 8 : python27:2.7 (CESA-2020:1605)	critical
145888	CentOS 8 : openwsman (CESA-2020:4689)	high
145887	CentOS 8 : go-toolset:rhel8 (CESA-2020:3665)	high
145886	CentOS 8 : e2fsprogs (CESA-2020:1913)	high
145885	CentOS 8 : sudo (CESA-2020:1804)	high
145884	CentOS 8 : wavpack (CESA-2020:1581)	medium
145883	CentOS 8 : python3 (CESA-2020:4433)	medium
145882	CentOS 8 : postgresql:10 (CESA-2020:3669)	high
145881	CentOS 8 : libxml2 (CESA-2020:4479)	high
145880	CentOS 8 : gnome-software and fwupd (CESA-2020:4436)	medium
145879	CentOS 8 : nghttp2 (CESA-2020:2755)	high
145878	CentOS 8 : nss and nspr (CESA-2020:3280)	critical
145877	CentOS 8 : libsolv (CESA-2020:4508)	high
145876	CentOS 8 : samba (CESA-2020:1878)	critical
145875	CentOS 8 : libldb (CESA-2020:4568)	medium
145874	CentOS 8 : ibus and glib2 (CESA-2020:1880)	high
145873	CentOS 8 : idm:DL1 and idm:client (CESA-2020:4670)	medium
145872	CentOS 8 : pcre2 (CESA-2020:4539)	high

Detections

Analytics

CentOS Local Security Checks Family for Nessus

high

high

high

medium

high

high

medium

medium

high

high

high

medium

high

high

critical

critical

high

high

critical

high

critical

medium

high

high

critical

high

high

high

critical

medium

high

medium

critical

high

high

high

high

medium

medium

high

high

medium

high

critical

high

critical

medium

high

medium

high