Adobe Reader < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24)

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30467 or 23.001.20143. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an out-of-bounds read...

McAfee Total Protection < 16.0.30 Multiple Vulnerabilities (TS103114)

The version of McAfee Total Protection installed on the remote Windows host is prior to 16.0.30. It is, therefore, affected by multiple vulnerabilities, including the following: - Bypass Remote Procedure call in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated...

Adobe ColdFusion < 2018.x < 2018 Update 16 / 2021.x < 2021 Update 6 Multiple Vulnerabilities (APSB23-25)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x Update 16 or 2021.x Update 6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-25 advisory. - Deserialization of Untrusted Data CWE-502 potentially leading to Arbitrary code...

SAP BusinessObjects Business Intelligence Platform Multiple Vulnerabilities (3287120)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a multiple vulnerabilities: - SSRF, an attacker can control a malicious BOE server, forcing the application server to connect to its own admintools CVE-2023-27271 - SSRF, n attack...

Mozilla Thunderbird < 102.9

The version of Thunderbird installed on the remote Windows host is prior to 102.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-11 advisory. - Mozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs...

Adobe Photoshop 23.x < 23.5.4 / 24.x < 24.2.1 Vulnerability (APSB23-23)

The version of Adobe Photoshop installed on the remote Windows host is prior to 23.5.4/24.2.1. It is, therefore, affected by a vulnerability as referenced in the apsb23-23 advisory. - Adobe Photoshop versions 23.5.3 and earlier and 24.1.1 and earlier are affected by a Use After Free vulnerability...

Wireshark 4.0.x < 4.0.4 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.0.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.0.4 advisory. - The ISO 15765 and ISO 10681 dissectors could crash. It may be possible to make Wireshark crash by injecting a malformed...

Dell EMC NetWorker RCE (DSA-2023-041)

The version of Dell EMC NetWorker installed on the remote Windows host is affected by a remote code execution vulnerability in the NetWorker Client execution service nsrexecd irrespective of any auth used. Note that Nessus has not tested for this issue but has instead relied only on the...

Arbitrary Code Execution

MongoDB.Bson is vulnerable to Arbitrary Code Execution. The vulnerability exists because the library does not properly filter AllowedTypes when deserializing an object, allowing a privileged attacker to inject and execute malicious code through the ObjectSerializer in specific situtations. The...

CVE-2022-48282

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

CVE-2022-48282

CVE-2022-48282 affects MongoDB .NET/C# Driver up to version 2.18.0. Under very specific conditions, a privileged user can cause arbitrary code execution via deserialization, involving applications written in C# running on Windows with the full .NET Framework, taking user data, and serializing wit...

PT-2023-15661 · Mongodb · Mongodb .Net/C# Driver

Name of the Vulnerable Software and Affected Versions: MongoDB .NET/C Driver versions prior to and including v2.18.0 Description: Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed, which may cause further disruption to services. This issue is...

Adobe FrameMaker 2020 < 16.0.5 (2020.0.5) / Adobe FrameMaker 2022 < 17.0.1 (2022.0.1) Multiple Vulnerabilities (APSB23-06)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.5 / Adobe FrameMaker 2022 17.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-06 advisory. - FrameMaker 2020 Update 4 and earlier, 2022 and earlier ar...

Adobe Bridge 12.x < 12.0.4 / 13.x < 13.0.2 Multiple Vulnerabilities (APSB23-09)

The version of Adobe Bridge installed on the remote Windows host is prior to 12.0.4 or 13.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-09 advisory. - Adobe Bridge versions 12.0.3 and earlier and 13.0.1 and earlier are affected by an out-of-bounds write...

SAP BusinessObjects Business Intelligence Platform Unrestricted File Upload (3256787)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P12, 4.3 SP2 P9, 4.3 SP3 P1 or 4.3 SP4. It may, therefore, be affected by an unrestricted file upload vulnerability in the Central Management Console CMC. A remote attacker,...

Adobe After Effects < 22.6.4 / 23.0 < 23.2 Multiple Vulnerabilities (APSB23-02)

The version of Adobe After Effects installed on the remote Windows host is prior to 22.6.4, 23.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-02 advisory. - After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input...

SAP BusinessObjects Business Intelligence Platform XSS (3263863)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.3 SP2 P9, 4.3 SP3 P1 or 4.3 SP4. It is, therefore, affected by a cross-site scripting XSS vulnerability. In SAP BusinessObjects Business Intelligence Web Intelligence user interfac...

Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)

The version of Adobe Animate installed on the remote Windows host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After Free...