Lucene search
Arnie CabralTENABLE:211874913BADB49990BB222D4165D08FHistoryJul 22, 2021 - 6:11 p.m.
[R2] Tenable.sc 5.19.0 Fixes Multiple Third-party Vulnerabilities
2021-07-2218:11:52
Arnie Cabral
www.tenable.com
59
0.011 Low
EPSS
Percentile
84.4%
Tenable.sc leverages third-party software to help provide underlying functionality. Multiple third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers.
Out of caution, and in line with best practice, Tenable has upgraded the bundled components to address the potential impact of these issues. Tenable.sc 5.19.0 updates the following components:
1. Handlebars
CVE-2019-19919
Severity: Critical
2. Underscore
CVE-2021-23358
Severity: High
Related
veracode
veracode
Prototype Pollution
2019-09-25 02:59:31
Arbitrary Code Execution
2021-03-30 07:34:14
debiancve
debiancve
CVE-2019-19919
2019-12-20 23:15:11
CVE-2021-23358
2021-03-29 14:15:18
cvelist
cvelist
CVE-2019-19919
2019-12-20 22:50:39
CVE-2021-23358 Arbitrary Code Injection
2021-03-29 00:00:00
cve
cve
CVE-2019-19919
2019-12-20 23:15:11
CVE-2021-23358
2021-03-29 14:15:18
nodejs
nodejs
Prototype Pollution
2019-09-16 15:14:43
Arbitrary Code Execution
2021-05-06 16:14:45
redhatcve
redhatcve
CVE-2019-19919
2020-01-10 20:38:59
CVE-2021-23358
2021-03-29 18:02:58
prion
prion
Remote code execution
2019-12-20 23:15:00
Code injection
2021-03-29 14:15:00
osv
osv
Prototype Pollution in handlebars
2019-12-26 17:58:13
underscore - security update
2021-03-31 00:00:00
underscore vulnerability
2021-04-14 16:53:02
nvd
nvd
CVE-2019-19919
2019-12-20 23:15:11
CVE-2021-23358
2021-03-29 14:15:18
ubuntucve
ubuntucve
CVE-2019-19919
2019-12-20 00:00:00
CVE-2021-23358
2021-03-29 00:00:00
github
github
Prototype Pollution in handlebars
2019-12-26 17:58:13
Arbitrary Code Execution in underscore
2021-05-06 16:09:43
openvas
openvas
Debian: Security Advisory (DLA-2613-1)
2021-04-01 00:00:00
Debian: Security Advisory (DSA-4883-1)
2021-04-03 00:00:00
Ubuntu: Security Advisory (USN-4913-2)
2022-01-28 00:00:00
suse
suse
Security update for nodejs-underscore (important)
2021-04-23 00:00:00
atlassian
atlassian
CVE-2021-23358 - Need to upgrade Underscore.js to 1.13.1 or higher
2021-06-02 16:03:32
CVE-2021-23358 - Need to upgrade Underscore.js to 1.13.1 or higher
2021-10-21 11:57:11
Mobile web: upgrade Underscore.js to 1.13.1 or higher
2022-07-04 00:08:49
ibm
ibm
fedora
fedora
[SECURITY] Fedora 33 Update: nodejs-underscore-1.13.1-1.fc33
2021-08-24 01:05:31
[SECURITY] Fedora 34 Update: nodejs-underscore-1.13.1-1.fc34
2021-08-24 03:33:12
debian
debian
[SECURITY] [DLA 2613-1] underscore security update
2021-03-31 21:27:11
[SECURITY] [DSA 4883-1] underscore security update
2021-04-01 19:56:52
nessus
nessus
Debian DLA-2613-1 : underscore security update
2021-04-01 00:00:00
Ubuntu 21.04 : Underscore vulnerability (USN-4913-2)
2021-04-28 00:00:00
ubuntu
ubuntu
Underscore vulnerability
2021-04-14 00:00:00
Underscore vulnerability
2021-04-28 00:00:00
mageia
mageia
Updated puddletag packages fix security vulnerability
2021-06-18 22:24:28
githubexploit
githubexploit
Exploit for Code Injection in Underscorejs Underscore
2023-02-25 19:12:13
laminas
laminas
XSS and RCE vectors in laminas-api-tools/api-tools-documentation-swagger
2020-04-01 21:30:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00