Adobe Connect <= 11.9.975.228 Vulnerability (APSB16-17)

The version of Adobe Connect installed on the remote host is prior to 11.9.976.291. It is, therefore, affected by a vulnerability as referenced in the apsb16-17 advisory. - Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local use...

Adobe After Effects < 17.0.4 Arbitrary code execution (APSB20-09) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 17.0.4. It is, therefore, affected by a vulnerability as referenced in the APSB20-09 advisory. - Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation cou...

Adobe Animate 16.x < 16.0.0.112 A Vulnerability (APSB16-38)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 16.0.0.112. It is, therefore, affected by a vulnerability as referenced in the apsb16-38 advisory. - Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful...

Adobe Prelude < 8.1.1 Arbitrary code execution (APSB19-35)

The version of Adobe Prelude installed on the remote Windows host is prior to 8.1.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-35 advisory. - Adobe Prelude CC versions 8.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Adobe After Effects < 17.0.6 Information Disclosure (APSB20-21) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 17.0.6. It is, therefore, affected by a vulnerability as referenced in the APSB20-21 advisory. - Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation coul...

Adobe Media Encoder < 14.0.3 Arbitrary Code Execution (APSB20-10)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.0.3. It is, therefore, affected by a vulnerability as referenced in the APSB20-10 advisory. - Adobe Media Encoder versions 14.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation cou...

Ubuntu 24.10 : libgsf vulnerabilities (USN-7062-2)

The remote Ubuntu 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7062-2 advisory. USN-7062-1 fixed vulnerabilities in libgsf. This update provides the corresponding updates for Ubuntu 24.10. Tenable has extracted the preceding description...

Adobe Audition < 13.0.6 Information Disclosure (APSB20-28) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 13.0.6. It is, therefore, affected by a vulnerability as referenced in the APSB20-28 advisory. - Adobe Audition versions 13.0.5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to...

Adobe Premiere Pro < 14.2 Information Disclosure (APSB20-27) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 14.2. It is, therefore, affected by a vulnerability as referenced in the APSB20-27 advisory. - Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead...

Adobe Animate 16.x < 16.0.0.112 A Vulnerability (APSB16-38)

The version of Adobe Animate installed on the remote Windows host is prior to 16.0.0.112. It is, therefore, affected by a vulnerability as referenced in the apsb16-38 advisory. - Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful...

Adobe Audition < 13.0.7 Multiple Arbitrary Code Execution (APSB20-40) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 13.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-40 advisory. - Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. Successful exploitation coul...

Adobe Digital Editions < 4.5.10 Information Disclosure (APSB19-04) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.10. It is, therefore, affected by a vulnerability as referenced in the APSB19-04 advisory. - Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation...

Slackware Linux 15.0 openssl Vulnerability (SSA:2024-295-01)

The version of openssl installed on the remote host is prior to 1.1.1zb. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-295-01 advisory. New openssl packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding description bloc...

Photon OS 5.0: Linux PHSA-2024-5.0-0385

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0385. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Palo Alto GlobalProtect Agent Local Privilege Escalation (CVE-2024-9473)

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to insta...

Oracle Linux 7 : 389-ds-base (ELSA-2024-7434)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7434 advisory. 1.3.11.1-5.0.3 - Security fix for CVE-2024-8445 Orabug: 37119399CVE-2024-8445 Tenable has extracted the preceding description block directly from the Oracle Lin...

Devolutions Remote Desktop Manager Information Disclosure (DEVO-2024-0014)

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions. Note that Nessus has not tested for thi...

Remote Desktop client for Windows RCE (October 2024)

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote-code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

SolarWinds Web Help Desk < 12.8.3 HF 3 Java Deserialization RCE

The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF3. It is, therefore, affected by a Java deserialization remote-code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested f...

JetBrains YouTrack < 2024.3.46677 Improper Access Control

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.46677. It is, therefore, affected by a vulnerability as referenced in the 2024346677 advisory. - In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to dele...