Microsoft Edge (Chromium) < 86.0.622.69 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 86.0.622.69. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-11-13-2020 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

GLSA-202011-13 : Salt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-13 Salt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Google Chrome < 86.0.4240.198 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop11 advisory. - Use after free in site isolation in Google Chrome prior to 86.0.4240.198...

Google Chrome < 86.0.4240.198 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop11 advisory. - Use after free in site isolation in Google Chrome prior to 86.0.4240.198...

Microsoft Windows Multiple Vulnerabilities (KB4586834)

This host is missing a critical security update according to Microsoft KB4586834 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: November 10, 2020

None None...

November 10, 2020—KB4586817 (Security-only update)

None None...

November 10, 2020—KB4586793 (OS Build 17763.1577) - EXPIRED

None None...

November 10, 2020—KB4586808 (Security-only update)

None None...

November 10, 2020—KB4586823 (Security-only update)

None None...

November 10, 2020—KB4586845 (Monthly Rollup)

None None...

PT-2020-4872 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to insecure privilege management in the Windows Error Reporting service, which can be exploited to elevate privileges. This could allow an attacker to...

AppDisks Diagnostic Tool

Description In case of failure during AppDisks creation or delivery, AppDisks Diagnostic Tool can be used to collect the relevant logs and metadata files that can be provided to the Citrix Technical Support team. AppDisks Diagnostic Tool collects the known log files, metadata files and Windows lo...

Apple iOS and Apple iPadOS Data Forgery Issue Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in several Apple products, which can be exploited by an attacker to intercept...

RHEL 8 : freetype (RHSA-2020:4949)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4949 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

Google Chrome < 86.0.4240.183 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.183. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop advisory. - Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.18...

Google Chrome < 86.0.4240.183 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.183. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop advisory. - Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183...

Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to Using Components with Known Vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2020-11868 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a flaw in ntpd. By sending a server mode packet with...

Security Bulletin: IBM Security QRadar Packet Capture is vulnerable to Using Components with Known Vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2019-3855 DESCRIPTION: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8....

NSA Alert: Chinese State-Sponsored Actors Exploit Known Vulnerabilities

On October 20, 2020, the United States National Security Agency NSA released a cybersecurity advisory on Chinese state-sponsored malicious cyber activity. The NSA alert provided a list of 25 publicly known vulnerabilities that are known to be recently leveraged by cyber actors for various hacking...