The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0806 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.116 and .NET Runtime 7.0.16.

    Security Fix(es):

    * dotnet: Denial of Service in SignalR server (CVE-2024-21386)

    * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6753-1 advisory.

    Thomas Neil James Shadwell discovered that CryptoJS was using an insecure cryptographic default     configuration. A remote attacker could possibly use this issue to expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1265 advisory.

    This advisory aggregates security fixes for the dotnet6.0 SRPM in CIQ LTS 8.6. It addresses 4 CVEs:
    CVE-2024-43485, CVE-2024-43484, CVE-2024-43483, CVE-2023-46233.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1017 advisory.

    This advisory aggregates security fixes for the dotnet6.0 SRPM in CIQ LTS 8.6. It addresses 4 CVEs:
    CVE-2023-46233, CVE-2024-43484, CVE-2024-43483, CVE-2024-43485.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1018 advisory.

    This advisory aggregates security fixes for the dotnet6.0 SRPM in CIQ LTS 9.2. It addresses 6 CVEs:
    CVE-2023-46233, CVE-2024-43484, CVE-2024-0056, CVE-2024-0057, CVE-2024-43483, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0158 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.126 and .NET Runtime 6.0.26.

    Security Fix(es):

    * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056)

    * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)

    * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0805 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.116 and .NET Runtime 7.0.16.

    Security Fix(es):

    * dotnet: Denial of Service in SignalR server (CVE-2024-21386)

    * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3669 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3669-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     November 27, 2023                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : cryptojs     Version        : 3.1.2+dfsg-2+deb10u1     CVE ID         : CVE-2023-46233     Debian Bug     : 1055525

    Thomas Neil James Shadwell reported that cryptojs, a collection of     cryptographic algorithms implemented in JavaScript, had default PBKDF2     settings 1000 times weaker than when specified back in 1993, and 1.3M     times weaker than OWASP's current recommendations.

    The default settings are now changed to use SHA256 with 250k iterations.

    For Debian 10 buster, this problem has been fixed in version     3.1.2+dfsg-2+deb10u1.

    We recommend that you upgrade your cryptojs packages.

    For the detailed security status of cryptojs please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/cryptojs

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
190500	RHEL 8 : dotnet7.0 (RHSA-2024:0806)	Nessus	Red Hat Local Security Checks	2024/2/13	2026/1/21	critical
193904	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : CryptoJS vulnerability (USN-6753-1)	Nessus	Ubuntu Local Security Checks	2024/4/25	2024/8/27	critical
356478	Rocky Linux 8.6 [CIQ] Security Update: dotnet-host / dotnet-host-debuginfo Multiple Vulnerabilities (ciqsa-2026_1265)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
353698	Rocky Linux 8.6 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc Multiple Vulnerabilities (ciqsa-2026_1017)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/11/3	high
354790	Rocky Linux 9.2 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / etc Multiple Vulnerabilities (ciqsa-2026_1018)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/11/3	high
187910	RHEL 8 : .NET 6.0 (RHSA-2024:0158)	Nessus	Red Hat Local Security Checks	2024/1/10	2025/3/6	critical
190495	RHEL 9 : dotnet7.0 (RHSA-2024:0805)	Nessus	Red Hat Local Security Checks	2024/2/13	2026/1/21	critical
186304	Debian dla-3669 : libjs-cryptojs - security update	Nessus	Debian Local Security Checks	2023/11/27	2025/1/22	critical

検出

プラグインの検索

critical

critical

high

high

high

critical

critical

critical