Trend Micro Apex One Multiple Vulnerabilities (000291830)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 11136 and Agent Build 11136. It is, therefore, affected by multiple vulnerabilities: - An arbitrary file deletion vulnerability in the Damage Cleanup Engine...

ImageMagick 7.1.0-49 Multiple Vulnerabilities

The remote Windows host has a version of ImageMagick installed that is 7.1.0-49. It is, therefore, affected by the following vulnerabilities: - Denial of Service DoS. When it parses a PNG image e.g., for resize, the convert process could be left waiting for stdin input. CVE-2022-44267 - Informati...

Microsoft Edge (Chromium) < 109.0.1518.52 Elevation of Privilege (CVE-2023-21795)

The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.52. It is, therefore, affected by a vulnerability as referenced in the January 13, 2023 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This CVE ID is unique from...

Mozilla Thunderbird < 102.7

The version of Thunderbird installed on the remote Windows host is prior to 102.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-03 advisory. - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.6. Some of...

Google Chrome < 109.0.5414.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 109.0.5414.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 202301stable-channel-update-for-desktop24 advisory. - Use after free in GuestView in Google Chrome prior to 109.0.5414.119...

Foxit PDF Editor < 11.2.6 and < 12.1.2 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host, with versions prior to 11.2.6 and 12.1.2 are vulnerable: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF...

Mozilla Firefox ESR < 102.7

The version of Firefox ESR installed on the remote Windows host is prior to 102.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-02 advisory. - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR...

Wireshark 4.0.x < 4.0.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.2 advisory. - Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6...

CVE-2023-0012

In SAP Host Agent Windows - versions 7.21, 7.22, an attacker who gains local membership to SAPLocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAPLocaAdmin are denied the ability to logo...

SAP BusinessObjects Business Intelligence Platform 4.1 < 4.1 SP12 P9 / 4.2 < 4.2 SP8 P5 XSS (2965154)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.1 SP12 P9, 4.2 SP8 P5 or 4.2 SP9 P0. It is, therefore, affected by a XSS vulnerability. An authenticated attacker is allowed to inject malicious JavaScript payload into the custom...

SAP BusinessObjects Business Intelligence Platform 4.2 < 4.2 SP9 P6 / 4.3 < 4.3 SP1 P11 Information Disclosure

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P6, 4.3 SP1 P11, 4.3 SP2 or 4.3 SP3. It is, therefore, affected by a vulnerability: - Under certain conditions SAP Business Objects Business Intelligence Platform - versions...

Dell EMC NetWorker < 19.8 DoS (DSA-2022-350)

The version of Dell EMC NetWorker installed on the remote Windows host is prior to 19.8. It, therefore, contains a version of Spring Framework that is affected by a denial of service DoS vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Mozilla Firefox ESR < 102.6

The version of Firefox ESR installed on the remote Windows host is prior to 102.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-52 advisory. - A use-after-free in WebGL extensions could have led to a potentially exploitable crash. CVE-2022-46882 - A missing...

Mozilla Firefox < 108.0

The version of Firefox installed on the remote Windows host is prior to 108.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-51 advisory. - Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team...

SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad) Insecure Deserialization

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P11, 4.3 SP2 P7 or 4.3 SP3. It is, therefore, affected by insecure deserialization vulnerability. In some workflow of SAP BusinessObjects BI Platform Central Management Conso...

Autodesk AutoCAD Multiple Vulnerabilities (adsk-sa-2022-0021)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2020.1.6, 2021.1.3, 2022.1.3 or 2023.1.1. It is, therefore, affected by multiple vulnerabilities. - A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023,...

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

Mozilla Firefox < 107.0

The version of Firefox installed on the remote Windows host is prior to 107.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-47 advisory. - Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safe...

VMWare Hyperic 代码问题漏洞

VMWare Hyperic is an application monitoring component of the Cloud Application Platform from VMWare, Inc. It enables IT professionals to manage the performance and availability of customized web applications in physical, virtual, and cloud environments. A code issue vulnerability exists in VMWare...

Mozilla Thunderbird < 102.4

The version of Thunderbird installed on the remote Windows host is prior to 102.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-46 advisory. - Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird...