Adobe Digital Editions < 4.5.10 Information Disclosure (APSB19-04) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.10. It is, therefore, affected by a vulnerability as referenced in the APSB19-04 advisory. - Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation...

Adobe Media Encoder < 14.0 Multiple Vulnerabilities (APSB19-52) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 14.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-52 advisory. - Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitatio...

Adobe Creative Cloud < 3.7.0.272 Multiple Vulnerabilities (APSB16-21)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 3.7.0.272. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-21 advisory. - Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272...

Ubuntu 24.10 : cups-browsed vulnerability (USN-7042-3)

The remote Ubuntu 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7042-3 advisory. USN-7042-2 released an improved fix for cups-browsed. This update provides the corresponding update for Ubuntu 24.10. Tenable has extracted the preceding description...

Adobe Media Encoder < 14.3 Multiple Vulnerabilities (APSB20-36)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-36 advisory. - Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful...

Adobe FrameMaker 2019 <= 15.0.8 (2019.0.8) / Adobe FrameMaker 2020 < 16.0.2 (2020.0.2) Arbitrary Code Execution (APSB21-45)

The version of Adobe FrameMaker installed on the remote Windows host is prior or equal to Adobe FrameMaker 2019 15.0.8 or prior to Adobe FrameMaker 2020 16.0.2. It is, therefore, affected by a vulnerability as referenced in the apsb21-45 advisory. - Adobe Framemaker version 2020.0.1 and earlier a...

Adobe InCopy 15.0.0 < 15.1.4 Arbitrary code execution (APSB21-05)

The version of Adobe InCopy installed on the remote host is prior to 15.1.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-05 advisory. - InCopy version 15.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitra...

Rockwell Automation ControlLogix Improper Input Validation (CVE-2024-6207)

A denial-of-service vulnerability exists in the affected products that will cause the device to result in a major nonrecoverable fault MNRF when it receives an invalid CIP request. To exploit this vulnerability a malicious user must chain this exploits with CVE-2021-22681 and send a specially...

Adobe Audition < 14.4 Memory leak (APSB21-62) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 14.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-62 advisory. - Adobe Audition version 14.2 and earlier is affected by an out-of-bounds read vulnerability when parsing a specially crafted...

Adobe After Effects < 18.4.6 / 22.0.0 < 22.3.0 Multiple Arbitrary code execution (APSB22-19) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 18.4.6, 22.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-19 advisory. - Adobe After Effects versions 22.2.1 and earlier and 18.4.5 and earlier are affected by a stack overfl...

Adobe Illustrator < 24.0 Multiple Vulnerabilities (APSB19-36) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 24.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-36 advisory. - Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation...

GiveWP Plugin for WordPress < 3.16.4 Remote Code Execution

The WordPress GiveWP Plugin installed on the remote host is affected by a PHP object injection vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Adobe Dimension < 3.4.4 Multiple Vulnerabilities (APSB21-116) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-116 advisory. - Adobe Dimension versions 3.4.3 and earlier are affected by an out-of-bounds write vulnerability that could result...

Adobe InDesign 12.0.0 < 13.0.0 Remote Code Execution (APSB17-38) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 13.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB17-38 advisory. - An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exist...

Adobe Media Encoder < 14.0.3 Arbitrary Code Execution (APSB20-10)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.0.3. It is, therefore, affected by a vulnerability as referenced in the APSB20-10 advisory. - Adobe Media Encoder versions 14.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation cou...

Ubuntu 24.10 : libgsf vulnerabilities (USN-7062-2)

The remote Ubuntu 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7062-2 advisory. USN-7062-1 fixed vulnerabilities in libgsf. This update provides the corresponding updates for Ubuntu 24.10. Tenable has extracted the preceding description...

XWiki Platform 7.0 < 14.4.8 / 14.5 < 14.10.4 Remote Code Execution

XWiki Platform versions 7.0, before 14.4.8 and versions 14.5 before 14.10.4 suffer from an improper escaping in the document 'SkinsCode.XWikiSkinsSheet'. By leveraging this vulnerability, a remote and unauthenticated attacker can achieve privilege escalation and achieve code execution on the...

SEOPress Plugin for WordPress < 7.9 PHP Object Injection

The WordPress SEOPress Plugin installed on the remote host is affected by a PHP object injection vulnerability via the deserialization of untrusted input from the 'title' parameter. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...

Adobe Bridge 6.x < 6.1.1 Multiple Vulnerabilities (APSB15-13)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb15-13 advisory. - Heap-based buffer overflow in Adobe Photoshop CC before 16.0 aka 2015.0.0 and Adobe Bridge CC before 6.11...

Adobe Media Encoder < 13.1.0 Multiple Vulnerabilities (APSB19-29)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 13.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-29 advisory. - Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead t...