Mozilla Firefox ESR < 78.11

The version of Firefox ESR installed on the remote Windows host is prior to 78.11. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-24 advisory. - Mozilla developers Gabriele Svelto, Anny Gakhokidze, Alexandru Michis, Christian Holler reported memory safety bug...

Google Chrome < 91.0.4472.77 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 91.0.4472.77. It is, therefore, affected by multiple vulnerabilities as referenced in the 202105stable-channel-update-for-desktop25 advisory. - Insufficient policy enforcement in content security policy in Google Chrome...

Mozilla Thunderbird < 78.10.2

The version of Thunderbird installed on the remote Windows host is prior to 78.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-22 advisory. - If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an...

Adobe Creative Cloud Desktop < 5.4.3 Privilege Escalation (APSB21-31)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is prior to version 5.4.3. It is, therefore, affected by a privilege escalation vulnerability due to an uncontrolled search path element. Note that Nessus has not tested for this issue but has instead relied only on...

Foxit Reader < 10.1.4 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 10.1.4. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Mozilla Firefox < 88.0.1

The version of Firefox installed on the remote Windows host is prior to 88.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-20 advisory. - When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume tha...

Mozilla Firefox ESR < 78.10.1

"The version of Firefox ESR installed on the remote Windows host is prior to 78.10.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2021-18 advisory. - The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal...

Mozilla Thunderbird < 78.10.1

"The version of Thunderbird installed on the remote Windows host is prior to 78.10.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2021-19 advisory. - The Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote...

Apple iTunes < 12.11.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.11.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT212319 advisory. - In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3,...

Wireshark 3.2.x < 3.2.13 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.2.13. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.13 advisory. - Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of servi...

Wireshark 3.4.x < 3.4.5 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.4.5. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.5 advisory. - Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service...

Mozilla Thunderbird < 78.10

The version of Thunderbird installed on the remote Windows host is prior to 78.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-14 advisory. - Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port...

Google Chrome < 90.0.4430.72 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 90.0.4430.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202104stable-channel-update-for-desktop14 advisory. - Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowe...

Mozilla Thunderbird < 78.9.1

The version of Thunderbird installed on the remote Windows host is prior to 78.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-13 advisory. - When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt...

Rockstar Service - Insecure File Permissions Vulnerability

Exploit Title: Rockstar Service - Insecure File Permissions Exploit Author: George Tsimpidas Software Link : https://socialclub.rockstargames.com/rockstar-games-launcher Version Patch: 1.0.37.349 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Vulnerability Description:...

Mozilla Thunderbird < 78.9

The version of Thunderbird installed on the remote Windows host is prior to 78.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-12 advisory. - Mozilla developers and community members Alexis Beingessner, Tyson Smith, Julien Wajsberg, and Matthew Gregan...

Design/Logic Flaw

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...

Mozilla Firefox ESR < 78.9

The version of Firefox ESR installed on the remote Windows host is prior to 78.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-11 advisory. - Mozilla developers and community members Alexis Beingessner, Tyson Smith, Julien Wajsberg, and Matthew Gregan...

PT-2021-14479 · Jellyfin · Jellyfin

Name of the Vulnerable Software and Affected Versions: Jellyfin versions prior to 10.7.1 Description: The issue allows arbitrary file read from a Jellyfin server's file system with well-crafted requests to certain "API Endpoints". This is more prevalent when Windows is used as the host OS. Server...

Security Update for .NET Core (March 2021)

The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.26, 3.1.x prior to 3.1.13, or 5.x prior to 5.0.4. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute...