Photon OS 4.0: Linux PHSA-2024-4.0-0703

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0703. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Google Chrome < 130.0.6723.70 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.70. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop22 advisory. - Inappropriate implementation in Extensions. CVE-2024-10229 - Type Confusio...

RHEL 6 : odh-operator-container (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - http-proxy-middleware: Denial of Service CVE-2024-21536 Note that Nessus has not tested for this issue but has...

October 22, 2024—KB5045594 (OS Build 19045.5073) Preview

None None...

SUSE SLED15: apache2 / apache2-devel / apache2-event / apache2-manual / etc (SUSE-SU-2024:3742-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3742-1 advisory. - CVE-2024-40725: Fixed source code disclosure of local content bsc1228097 Tenable has extracted the...

Mura/Masa CMS SQL Injection

Mura and Masa CMS Open-source fork suffer from a SQL injection vulnerability on the JSON API. By crafting a specific HTTP request, a remote and unauthenticated attacker can exploit the vulnerability to gain access to the database and perform arbitrary operations. No source data...

Adobe Digital Editions < 4.5.1 (APSB16-06) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.1. It is, therefore, affected by a vulnerability as referenced in the APSB16-06 advisory. - Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service memory...

Adobe Digital Editions < 4.5.3 Multiple Vulnerabilities (APSB16-45) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-45 advisory. - Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could...

Adobe Illustrator < 25.4.3 / 26.0.0 < 26.0.2 Multiple Privilege escalation (APSB22-02) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 25.4.3, 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-02 advisory. - Adobe Illustrator versions 25.4.2 and earlier and 26.0.1 and earlier are affected by an out-of-bounds...

Adobe Audition < 13.0.6 Information Disclosure (APSB20-28) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 13.0.6. It is, therefore, affected by a vulnerability as referenced in the APSB20-28 advisory. - Adobe Audition versions 13.0.5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to...

Adobe Media Encoder < 14.3 Multiple Vulnerabilities (APSB20-36) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-36 advisory. - Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitatio...

Adobe Creative Cloud < 4.8.0.410 Privilege Escalation (APSB19-11)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.8.0.410. It is, therefore, affected by a vulnerability as referenced in the APSB19-11 advisory. - Creative Cloud Desktop Application installer versions 4.7.0.400 and earlier have an insecure library loading dll...

Adobe Animate 16.x < 16.0.0.112 A Vulnerability (APSB16-38)

The version of Adobe Animate installed on the remote Windows host is prior to 16.0.0.112. It is, therefore, affected by a vulnerability as referenced in the apsb16-38 advisory. - Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful...

Adobe Bridge 6.x < 6.1.1 Multiple Vulnerabilities (APSB15-13)

The version of Adobe Bridge installed on the remote Windows host is prior to 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb15-13 advisory. - Heap-based buffer overflow in Adobe Photoshop CC before 16.0 aka 2015.0.0 and Adobe Bridge CC before 6.11 allows...

Adobe Connect <= 11.9.975.228 Vulnerability (APSB16-17)

The version of Adobe Connect installed on the remote host is prior to 11.9.976.291. It is, therefore, affected by a vulnerability as referenced in the apsb16-17 advisory. - Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local use...

Adobe Audition < 13.0.7 Multiple Arbitrary Code Execution (APSB20-40) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 13.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-40 advisory. - Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. Successful exploitation coul...

Adobe InDesign < 12.0.0 (APSB16-43)

The version of Adobe InDesign installed on the remote Windows host is prior to 12.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB16-43 advisory. - Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption...

Adobe Illustrator < 24.2.0 Multiple Vulnerabilities (APSB20-37) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 24.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-37 advisory. - Adobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability. Successful exploitation could...

Adobe Prelude < 8.1.1 Arbitrary code execution (APSB19-35)

The version of Adobe Prelude installed on the remote Windows host is prior to 8.1.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-35 advisory. - Adobe Prelude CC versions 8.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Gradio < 4.37.1 Open Redirect

Gradio before version 4.37.1 suffer from an open redirect vulnerability, allowing an attacker to craft a link and try redirecting target applications users to a malicious server. This detection is included in the AI and LLM category. No source data...