1270 matches found
Chinese 'Mustang Panda' Hackers Spotted Deploying New 'Hodur' Malware
A China-based advanced persistent threat APT known as Mustang Panda has been linked to an ongoing cyber espionage campaign using a previously undocumented variant of the PlugX remote access trojan on infected machines. Slovak cybersecurity firm ESET dubbed the new version Hodur, owing to its...
Apple iTunes < 12.12.3 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...
Apple iTunes < 12.12.3 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...
Adobe Photoshop 22.x < 22.5.6 / 23.x < 23.2 Vulnerability (APSB22-14)
The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.6/23.2. It is, therefore, affected by a vulnerability as referenced in the apsb22-14 advisory. - Adobe Photoshop versions 23.1.1 and earlier and 22.5.5 and earlier are affected by an out-of-bounds read...
Mozilla Firefox ESR < 91.7
The version of Firefox ESR installed on the remote Windows host is prior to 91.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-11 advisory. - If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were...
Mozilla Firefox ESR < 91.6.1
The version of Firefox ESR installed on the remote Windows host is prior to 91.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-09 advisory. - An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. ...
Mozilla Thunderbird < 91.6.2
The version of Thunderbird installed on the remote Windows host is prior to 91.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-09 advisory. - An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. ...
Google Chrome < 99.0.4844.51 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 99.0.4844.51. It is, therefore, affected by multiple vulnerabilities as referenced in the 202203stable-channel-update-for-desktop advisory. - Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51...
VMware Workstation 16.0.x < 16.2.1 Multiple Vulnerabilities (VMSA-2022-0004)
The version of VMware Workstation installed on the remote host is 16.0.x prior to 16.2.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...
Adobe Photoshop 22.x < 22.5.5 / 23.x < 23.1.1 Vulnerability (APSB22-08)
The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.5/23.1.1. It is, therefore, affected by a vulnerability as referenced in the apsb22-08 advisory. - Adobe Photoshop versions 22.5.4 and earlier and 23.1 and earlier are affected by a buffer overflow vulnerability...
Adobe Illustrator < 25.4.4 / 26.0.0 < 26.0.3 Multiple Vulnerabilities (APSB22-07)
The version of Adobe Illustrator installed on the remote Windows host is prior to 25.4.4, 26.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-07 advisory. - Adobe Illustrator versions 25.4.3 and earlier and 26.0.2 and earlier are affected by a buffer overflo...
Mozilla Firefox < 97.0
The version of Firefox installed on the remote Windows host is prior to 97.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-04 advisory. - Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firef...
CVE-2022-22938
VMware Workstation 16.x prior to 16.2.2 and Horizon Client for Windows 5.x prior to 5.5.3 contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this...
Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)
The version of Adobe Reader installed on the remote Windows host is a version prior to 17.011.30207, 20.004.30020, or 21.011.20039. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier a...
Wireshark 3.6.x < 3.6.1 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.1 advisory. - Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted...
Wireshark 3.4.x < 3.4.11 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.4.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.4.11 advisory. - Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or...
Adobe Prelude < 22.1.1 Multiple Vulnerabilities (APSB21-114)
The version of Adobe Prelude installed on the remote Windows host is prior to 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-114 advisory. - Adobe Prelude version 22.1.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure...
Adobe Audition < 14.4.3 / 22.0.0 < 22.1.1 Multiple Privilege escalation (APSB21-121)
The version of Adobe Audition installed on the remote Windows host is prior to 14.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-121 advisory. - Adobe Audition versions 14.4 and earlier, and 22.0 and earlierare affected by an out-of-bounds read...
Adobe Premiere Rush <= 1.5.16 Multiple Vulnerabilitiesâ¯(APSB21-101)
The version of Adobe Premiere Rush installed on the remote Windows host is version less than or equal to 1.5.16. It is, therefore, affected by multiple vulnerabilities, including the following: - Arbitrary code execution vulnerabilities caused by accessing memory locations after the end of a...