The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-2970:01 advisory.

    * Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
      * Mozilla: URL leakage when navigating while executing asynchronous function (CVE-2021-43536)
      * Mozilla: Heap buffer overflow when using structured clone (CVE-2021-43537)
      * Mozilla: Missing fullscreen and pointer lock notification when requesting both (CVE-2021-43538)
      * Mozilla: GC rooting failure when calling wasm instance methods (CVE-2021-43539)
      * Mozilla: External protocol handler parameters were unescaped (CVE-2021-43541)
      * Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler     (CVE-2021-43542)
      * Mozilla: Bypass of CSP sandbox directive when embedding (CVE-2021-43543)
      * Mozilla: JavaScript unexpectedly enabled for the composition area (CVE-2021-43528)
      * Mozilla: Denial of Service when using the Location API in a loop (CVE-2021-43545)
      * Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed (CVE-2021-43546)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-2971:02 advisory.

    * Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
      * Mozilla: URL leakage when navigating while executing asynchronous function (CVE-2021-43536)
      * Mozilla: Heap buffer overflow when using structured clone (CVE-2021-43537)
      * Mozilla: Missing fullscreen and pointer lock notification when requesting both (CVE-2021-43538)
      * Mozilla: GC rooting failure when calling wasm instance methods (CVE-2021-43539)
      * Mozilla: External protocol handler parameters were unescaped (CVE-2021-43541)
      * Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler     (CVE-2021-43542)
      * Mozilla: Bypass of CSP sandbox directive when embedding (CVE-2021-43543)
      * Mozilla: Denial of Service when using the Location API in a loop (CVE-2021-43545)
      * Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed (CVE-2021-43546)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5034 advisory.

    Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary     code, spoofing, information disclosure, downgrade attacks on SMTP STARTTLS connections or misleading     display of OpenPGP/MIME signatures. For the oldstable distribution (buster), these problems have been     fixed in version 1:91.4.1-1~deb10u1. For the stable distribution (bullseye), these problems have been     fixed in version 1:91.4.1-1~deb11u1. We recommend that you upgrade your thunderbird packages. For the     detailed security status of thunderbird please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/thunderbird

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
294165	MiracleLinux 8 : thunderbird-91.4.0-2.el8.ML.1 (AXSA:2022-2970:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293837	MiracleLinux 8 : firefox-91.4.0-1.el8.ML.1 (AXSA:2022-2971:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
156451	Debian DSA-5034-1 : thunderbird - security update	Nessus	Debian Local Security Checks	2022/1/3	2025/1/24	critical

检测

插件搜索

high

high

critical