4763 matches found
Google Chrome < 91.0.4472.164 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 91.0.4472.164. It is, therefore, affected by multiple vulnerabilities as referenced in the 202107stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed ...
Description of the security update for SharePoint Foundation 2013: July 13, 2021 (KB5001992)
Description of the security update for SharePoint Foundation 2013: July 13, 2021 KB5001992 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability, SharePoint Server spoofing vulnerability, and SharePoint Server information disclosure vulnerability...
Description of the security update for Microsoft Exchange Server 2019: July 13, 2021 (KB5004780)
None None...
Cumulative Update 10 for Exchange Server 2019 (KB5003612)
None None...
July 13, 2021—KB5004289 (Monthly Rollup)
None None...
July 13, 2021—KB5004245 (OS Build 18363.1679)
None None...
July 13, 2021 Security Update (KB5004235)
None None...
KB5004307: Windows 7 and Windows Server 2008 R2 Security Update (July 2021)
The remote Windows host is missing security update 5004307. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
Polkit D-Bus Authentication Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'unixcrypt' class MetasploitModule 'Polkit D-Bus Authentication Bypass', 'Description' = %q A vulnerability exists within the polkit system service that can be...
Cisco Integrated Management Controller Username Enumeration (cisco-sa-cimc-enum-CyheP3B7)
According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability due to differences in authentication responses sent back from the application as part of an authentication attempt. An unauthenticated, remote attacker can exploit this, by by sending...
KB5004958: Windows Server 2012 R2 OOB Security Update RCE (July 2021)
A remote command execution vulnerability exists in Windows Print Spooler service improperly performs privileged file operations. An authenticated, remote attacker can exploit this to bypass and run arbitrary code with SYSTEM privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
KB5004960: Windows Server 2012 OOB Security Update RCE (July 2021)
A remote command execution vulnerability exists in Windows Print Spooler service improperly performs privileged file operations. An authenticated, remote attacker can exploit this to bypass and run arbitrary code with SYSTEM privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
PT-2021-21108
Name of the Vulnerable Software and Affected Versions: SELinux version 3.2 Description: The issue is related to a heap-based buffer over-read in the ebitmap match any function, which is called indirectly from cil check neverallow. This occurs due to a lack of checks for invalid statements in an...
ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)
The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...
Cisco Firepower Threat Defense Software Web Services Interface Multiple Vulnerabilities (cisco-sa-asaftd-xss-multiple-FCB3vPZe)
According to its self-reported version, Cisco Firepower Threat Defense Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...
Microsoft Edge (Chromium) < 91.0.864.54 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.54. It is, therefore, affected by multiple vulnerabilities as referenced in the June 18, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Millions of Connected Cameras Open to Eavesdropping
Millions of connected security and home cameras contain a critical software vulnerability that can allow remote attackers to tap into video feeds, according to a warning from the Cybersecurity and Infrastructure Security Agency CISA. The bug CVE-2021-32934, with a CVSS v3 base score of 9.1 has be...
Security Bulletin: IBM Resilient SOAR is Using Components with Known Vulnerabilities - Eclipse Jetty (CVE-2021-28163, CVE-2021-28164, CVE-2021-28165)
Summary IBM Resilient SOAR is Using Components with Known Vulnerabilities - Eclipse Jetty. Vulnerability Details CVEID: CVE-2021-28163 DESCRIPTION: Eclipse Jetty could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw when the $jetty.base directory or the...
SUSE SLES11 Security Update : openssl1 (SUSE-SU-2019:14171-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14171-1 advisory. - Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases,...
SUSE: Security Advisory (SUSE-SU-2015:1528-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...