The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1353 advisory.

    [78.10.0-1.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [78.10.0-1]
    - Update to 78.10.0

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202104-10 (Mozilla Firefox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1360 advisory.

  - Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961)

  - Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994)

  - Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995)

  - Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998)

  - Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999)

  - Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002)

  - Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945)

  - Mozilla: Port blocking could be bypassed (CVE-2021-29946)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Further techniques that built on the slipstream research combined with a malicious webpage could have     exposed both an internal network's hosts as well as services running on the user's local machine. This     vulnerability affects Firefox < 85. (CVE-2021-23961)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1731:12 advisory.

    * Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994)
      * Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995)
      * Mozilla: More internal network hosts could have been probed by a malicious     webpage (CVE-2021-23961)
      * Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998)
      * Mozilla: Blob URLs may have been granted additional privileges     (CVE-2021-23999)
      * Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL     (CVE-2021-24002)
      * Mozilla: Incorrect size computation in WebAssembly JIT could lead to     null-reads (CVE-2021-29945)
      * Mozilla: Port blocking could be bypassed (CVE-2021-29946)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1733:13 advisory.

    * Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994)
      * Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995)
      * Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961)
      * Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998)
      * Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999)
      * Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002)
      * Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945)
      * Mozilla: Port blocking could be bypassed (CVE-2021-29946)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
149021	Oracle Linux 8 : thunderbird (ELSA-2021-1353)	Nessus	Oracle Linux Local Security Checks	4/27/2021	10/23/2024	high
149233	GLSA-202104-10 : Mozilla Firefox: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	5/3/2021	1/12/2024	high
149237	CentOS 8 : firefox (CESA-2021:1360)	Nessus	CentOS Local Security Checks	5/3/2021	1/2/2024	high
247640	Linux Distros Unpatched Vulnerability : CVE-2021-23961	Nessus	Misc.	8/10/2025	7/24/2026	high
294429	MiracleLinux 4 : firefox-78.10.0-1.0.1.AXS4 (AXSA:2021-1731:12)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
294525	MiracleLinux 8 : firefox-78.10.0-1.0.1.el8 (AXSA:2021-1733:13)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high