Remote code execution

A remote code execution vulnerability exists when the Windows Host Compute Service Shim hcsshim library fails to properly validate input while importing a container image, aka "Windows Host Compute Service Shim Remote Code Execution Vulnerability." This affects Windows Host Compute...

CVE-2018-8115

A remote code execution vulnerability exists when the Windows Host Compute Service Shim hcsshim library fails to properly validate input while importing a container image, aka "Windows Host Compute Service Shim Remote Code Execution Vulnerability." This affects Windows Host Compute...

CVE-2018-8115

CVE-2018-8115 affects the Windows Host Compute Service Shim (hcsshim) library. A remote code execution flaw exists because hcsshim fails to properly validate input when importing a container image, enabling an authenticated administrator to cause arbitrary code execution on the Windows host via a...

Windows Host Compute Service Shim Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Host Compute Service Shim hcsshim library fails to properly validate input while importing a container image. To exploit the vulnerability, an attacker would place malicious code in a specially crafted container image which, if an...

KLA11239 ACE vulnerability in Windows Host Compute Service Shim

An remote code execution vulnerability was found in Windows Host Compute Service Shim. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially crafted image container. Original advisories CVE-2018-8115 Exploitation...

Foxit PhantomPDF < 9.1 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109398; scriptversion"1.8...

Foxit Reader < 9.1 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109399; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Google Chrome < 66.0.3359.117 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 66.0.3359.117. It is, therefore, affected by multiple vulnerabilities as referenced in the 201804stable-channel-update-for-desktop advisory. - Insufficiently sanitized distributed objects in Updater in Google Chrome on...

Oracle Java SE Multiple Vulnerabilities (April 2018 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 10 Update 1, 8 Update 171, 7 Update 181, or 6 Update 191. It is, therefore, affected by multiple vulnerabilities related to the following components : - AWT - Concurrency - Hotspot - Install -...

CVE-2018-0964

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is...

IBM WebSphere Portal XSS Vulnerability

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108487; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

IBM WebSphere Portal XSS Vulnerability

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108488; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/08"; scriptcveid"CVE-2018-1401";...

Adobe Dreamweaver 18.0 < 18.1 Arbitrary Code Execution (APSB18-07)

The version of Adobe Dreamweaver installed on the remote Windows host is prior to 18.1. It is, therefore, affected by a vulnerability as referenced in the APSB18-07 advisory. - Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability. Successful exploitation could...

IBM WebSphere Portal Reflected XSS Vulnerability

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a reflected cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid107260; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/08";...

Telerik UI for ASP.NET AJAX RadAsyncUpload Multiple Vulnerabilities

The version of Telerik UI for ASP.NET AJAX installed on the remote Windows host is affected by multiple vulnerabilities in Telerik.Web.UI.dll. An unauthenticated, remote attacker can exploit this, via specially crafted data, to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Securit...

Oracle Java SE Multiple Vulnerabilities (January 2018 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 4, 8 Update 161, 7 Update 171, or 6 Update 181. It is, therefore, affected by multiple vulnerabilities related to the following components : - AWT - Deployment - Hotspot - I18n -...

Security Update for ASP.NET Core January 2018

The remote Windows host has an installation of ASP.NET Core and .NET Core SDK with a version less than 2.1.4. Therefore, the host is affected by multiple vulnerabilities: - An elevation of privilege vulnerability due to improper sanitization of web requests CVE-2018-0784 - A cross-site request...

Mozilla Thunderbird < 52.5.2

The version of Thunderbird installed on the remote Windows host is prior to 52.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-30 advisory. - It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via View -...

Mozilla Firefox ESR < 52.5.2

The version of Firefox ESR installed on the remote Windows host is prior to 52.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-28 advisory. - A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library,...

Cisco WebEx WRF Player Multiple Vulnerabilities (cisco-sa-20171129-webex-players)

The version of Cisco WebEx WRF Player installed on the remote host is affected by multiple vulnerabilities. A remote attacker could exploit these by providing a user with a malicious WRF file that in some cases could allow arbitrary code execution. C Tenable Network Security, Inc...