KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows...

Adobe Premiere Pro < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-58) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-58 advisory. - Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that...

NewStart CGSL MAIN 6.02 : dnf-plugins-core Vulnerability (NS-SA-2024-0064)

The remote NewStart CGSL host, running version MAIN 6.02, has dnf-plugins-core packages installed that are affected by a vulnerability: - A flaw was found in libdnf's signature verification functionality. This flaw allows an attacker to achieve code execution if they can alter the header...

NewStart CGSL MAIN 6.02 : curl Multiple Vulnerabilities (NS-SA-2024-0050)

The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by multiple vulnerabilities: - The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPTFOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow...

KB5043125: Windows Server 2012 Security Update (September 2024)

The remote Windows host is missing security update 5043125. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows Remote Desktop Licensing...

FreeBSD : netatalk3 -- multiple WolfSSL vulnerabilities (8fbe81f7-6eb5-11ef-b7bd-00505632d232)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8fbe81f7-6eb5-11ef-b7bd-00505632d232 advisory. Netatalk release reports: WolfSSL 5.7.0 included in netatalk includes multiple security...

KB5043080: Windows 11 version 24H2 Security Update (September 2024)

The remote Windows host is missing security update 5043080. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Microsoft Management Console Remote Code Execution Vulnerability CVE-2024-38259 - Windows Remote Access Connection...

NewStart CGSL MAIN 6.02 : cups Vulnerability (NS-SA-2024-0060)

The remote NewStart CGSL host, running version MAIN 6.02, has cups packages installed that are affected by a vulnerability: - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-0...

Adobe Premiere Pro < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-58)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-58 advisory. - Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability th...

Google Chrome < 128.0.6613.138 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.138. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop10 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137...

NewStart CGSL MAIN 6.02 : libwebp Multiple Vulnerabilities (NS-SA-2024-0067)

The remote NewStart CGSL host, running version MAIN 6.02, has libwebp packages installed that are affected by multiple vulnerabilities: - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863. CVE-2023-5129 - Heap buffer overflow in...

Oracle Linux 7 : java-11-openjdk (ELSA-2024-4564)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4564 advisory. - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144...

NewStart CGSL MAIN 6.02 : grub2 Multiple Vulnerabilities (NS-SA-2024-0068)

The remote NewStart CGSL host, running version MAIN 6.02, has grub2 packages installed that are affected by multiple vulnerabilities: - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read i...

Adobe Audition < 23.6.9 / 24.0.0 < 24.6.0 Multiple Vulnerabilities (APSB24-54)

The version of Adobe Audition installed on the remote Windows host is prior to 23.6.9, 24.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-54 advisory. - Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that...

NewStart CGSL MAIN 6.02 : webkit2gtk3 Multiple Vulnerabilities (NS-SA-2024-0053)

The remote NewStart CGSL host, running version MAIN 6.02, has webkit2gtk3 packages installed that are affected by multiple vulnerabilities: - A use-after-free issue was found in the AudioSourceProviderGStreamer class of WebKitGTK and WPE WebKit in versions prior to 2.30.5. Processing maliciously...

KB5043055: Windows Server version 23H2 Security Update (September 2024)

The remote Windows host is missing security update 5043055. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows Remote Desktop Licensing...

MLflow Detection

Binary data mlflowdetect.nbin...

NewStart CGSL MAIN 6.02 : vim Multiple Vulnerabilities (NS-SA-2024-0065)

The remote NewStart CGSL host, running version MAIN 6.02, has vim packages installed that are affected by multiple vulnerabilities: - A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The...

Adobe Audition < 23.6.9 / 24.0.0 < 24.6.0 Multiple Vulnerabilities (APSB24-54) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 23.6.9, 24.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-54 advisory. - Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that cou...

Security Updates for Microsoft Office Products (September 2024) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by a vulnerability as referenced in the september-10-2024 advisory. - Microsoft Excel Elevation of Privilege Vulnerability CVE-2024-43465 Note that Nessus has not tested for this issue but has instead relied only on...