CVE-2020-11552

An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An...

CVE-2020-11552

The CVE-2020-11552 vulnerability affects ManageEngine ADSelfService Plus prior to build 6003. It is an elevation-of-privilege flaw where the product does not properly enforce privileges related to a Certificate dialog, potentially allowing an unauthenticated attacker to escalate to SYSTEM on a Wi...

Mozilla Thunderbird < 78.1

The version of Thunderbird installed on the remote Windows host is prior to 78.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-33 advisory. - Mozilla developers and community members Natalia Csoregi, Simon Giesecke, Jason Kratzer, Christian Holler, and Luke...

Foxit 3D Plugin Beta < 9.7.2.29539 RCE

The version of the Foxit 3D plugin installed on the remote Windows host is prior to 9.7.2.29539. It is, therefore affected by an Out-of-Bounds Read/Write or Heap-based Buffer Overflow vulnerability due to improper validation of data when parsing certain file with incorrect 3D annotation data. An...

Mozilla Firefox ESR < 78.1

The version of Firefox ESR installed on the remote Windows host is prior to 78.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-32 advisory. - Mozilla developers and community members Natalia Csoregi, Simon Giesecke, Jason Kratzer, Christian Holler, and Luke...

Microsoft Edge (Chromium) < 81.0.416.68 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.68. It is, therefore, affected by multiple vulnerabilities: - A use after free in storage in Microsoft Edge Chromium allowed a remote attacker who had compromised the renderer process to potentially...

Mozilla Firefox ESR < 68.11

The version of Firefox ESR installed on the remote Windows host is prior to 68.11. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-31 advisory. - Mozilla developers Jason Kratzer and Luke Wagner reported memory safety bugs present in Firefox 78 and Firefox ESR...

Mozilla Firefox < 79.0

The version of Firefox installed on the remote Windows host is prior to 79.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-30 advisory. - Mozilla developers and community members Kevin Brosnan, Alexandru Michis, Natalia Csoregi, Jason Kratzer, Christian...

Adobe Prelude < 9.0.1 Multiple Vulnerabilities (APSB20-46)

The version of Adobe Prelude installed on the remote Windows host is prior to 9.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-46 advisory. - Adobe Prelude versions 9.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could le...

Adobe Photoshop CC 20.x < 20.0.10 / 21.x < 21.2.1 Multiple Vulnerabilities (APSB20-45)

The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.10/21.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-45 advisory. - Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds...

Mozilla Thunderbird < 78.0

The version of Thunderbird installed on the remote Windows host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-29 advisory. - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler reported...

Google Chrome < 84.0.4147.89 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 84.0.4147.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 202007stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allow...

Wireshark 3.2.x < 3.2.5 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.2.5. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.5 advisory. - In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in...

Mozilla Firefox < 78.0

The version of Firefox installed on the remote Windows host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-24 advisory. - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler reported memory...

Apple iCloud 7.x < 7.17 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.17. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to multiple memory corruption issues. An unauthenticated,...

Adobe Premiere Rush Installed

Adobe Premiere Rush, a video editing application, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid137652; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Adobe Premiere...

Adobe Premiere Rush <= 1.5.12 Arbitrary Code Execution (APSB20-39)

The version of Adobe Premiere Rush installed on the remote Windows host is version less than or equal to 1.5.12. It is, therefore, affected by out-of-bounds read and write vulnerabilities that could lead to arbitrary code execution. Note that Nessus has not attempted to exploit these issues but h...

Adobe Premiere Pro < 14.3 Multiple Arbitrary Code Execution (APSB20-38)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-38 advisory. - Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitatio...

Dell SupportAssist Multiple Vulnerabilities (DSA-2019-051)

The Dell SupportAssist Client versions prior to 3.2.0.90, installed on the remote Windows host reportedly is affected by multiple vulnerabilities : - An improper origin validation vulnerability exist in Dell SupportAssist Client versions prior to 3.2.0.90. An unauthenticated remote attacker could...

VLC < 2.1.4 DoS

A denial of service DoS vulnerability exists in VLC media player. An unauthenticated, remote attacker can exploit this issue, by tricking a user into opening a specially crafted .png file, to cause the application to stop responding. C Tenable Network Security, Inc. include'compat.inc'; if...