Adobe Acrobat < 20.005.30635 / 24.002.20759 Multiple Vulnerabilities (APSB24-29) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30635 or 24.002.20759. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could...

Rocky Linux 9 : gstreamer1-plugins-bad-free (RLSA-2024:2287)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2287 advisory. - GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

Rocky Linux 9 : unbound (RLSA-2024:1750)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1750 advisory. - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime...

Debian dla-3814 : libglib2.0-0 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3814 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3814-1 [email protected] https://www.debian.org/lts/security/...

Rocky Linux 9 : grafana-pcp (RLSA-2024:1502)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1502 advisory. - A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled...

SUSE SLES12: apache2 / apache2-devel / apache2-doc / apache2-example-pages / etc (SUSE-SU-2024:1627-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1627-1 advisory. - CVE-2023-38709: Fixed faulty input validation inside the HTTP response splitting code bsc1222330. - CVE-2024-24795: Fixed handlin...

Rocky Linux 9 : buildah bug fix update (Moderate) (RLSA-2024:2550)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2550 advisory. - The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a...

FreeBSD : chromium -- multiple security fixes (8e0e8b56-11c6-11ef-9f97-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8e0e8b56-11c6-11ef-9f97-a8a1599412c6 advisory. - Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perfo...

Adobe Acrobat < 20.005.30635 / 24.002.20759 Multiple Vulnerabilities (APSB24-29)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30635 or 24.002.20759. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could...

Rocky Linux 9 : nodejs (RLSA-2024:1438)

The remote Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:1438 advisory. - A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and...

TYPO3 9.0.0 < 9.5.48 ELTS / 10.0.0 < 10.4.45 ELTS / 11.0.0 < 11.5.37 / 12.0.0 < 12.4.15 / 13.0.0 < 13.1.1 XSS (TYPO3-CORE-SA-2024-008)

The version of TYPO3 installed on the remote host is prior to 9.0.0 9.5.48 ELTS / 10.0.0 10.4.45 ELTS / 11.0.0 11.5.37 / 12.0.0 12.4.15 / 13.0.0 13.1.1. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2024-008 advisory. - TYPO3 is an enterprise content management...

Google Chrome < 124.0.6367.201 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 124.0.6367.201. It is, therefore, affected by a vulnerability as referenced in the 202405stable-channel-update-for-desktop9 advisory. - Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote...

KB5037788: Windows 10 LTS 1507 Security Update (May 2024)

The remote Windows host is missing security update 5037788. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Security Feature Bypass Vulnerability CVE-2024-30040 - Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-29996,...

Rocky Linux 9 : golang (RLSA-2024:2562)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2562 advisory. - An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining...

KB5037781: Windows Server version 23H2 Security Update (May 2024)

The remote Windows host is missing security update 5037781. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Security Feature Bypass Vulnerability CVE-2024-30040 - Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-29996,...

Safari < 17.5 Vulnerability

Binary data 701469.pasl...

Apple iOS < 16.7.8 Multiple Vulnerabilities (120898)

Binary data appleios1678check.nbin...

Apple iOS < 17.5 Multiple Vulnerabilities (120905)

Binary data appleios175check.nbin...

Google Chrome < 124.0.6367.207 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 124.0.6367.207. It is, therefore, affected by a vulnerability as referenced in the 202405stable-channel-update-for-desktop13 advisory. - Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote...

Amazon Linux 2023 : cni-plugins (ALAS2023-2024-618)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-618 advisory. A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can...