1263 matches found
Flash Player < 10.2.153.1 Unspecified Memory Corruption (APSB11-05)
The remote Windows host contains a version of Adobe Flash Player earlier than 10.2.153.1. Such versions are affected by an unspecified memory corruption vulnerability. A remote attacker could exploit this by tricking a user into viewing maliciously crafted SWF content, resulting in arbitrary code...
Citrix Secure Gateway Installed
Citrix Secure Gateway is installed on the remote host. This application provides a secure gateway between Citrix XenApp and client devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52545; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
Symantec IM Manager IMAdminSchedTask.asp Eval Code Injection Remote Code Execution (SYM11-004)
The version of Symantec IM Manager installed on the remote Windows host is earlier than 8.4.17. The 'ScheduleTask' method exposed by the 'IMAdminSchedTask.asp' page fails to properly sanitize user input to a POST variable before using it in an 'eval' call. If a logged in console user can be trick...
Moxa Device Manager Tool MDM2_Gateway Response Remote Overflow
Binary data moxamdmtool23.nbin...
SigPlus Pro ActiveX Control < 4.29 Multiple Vulnerabilities
The SigPlus Pro ActiveX control, used for electronic signature integration with Topaz signature pads and installed on the remote Windows host, is earlier than 4.29. Such versions reportedly are affected by the following vulnerabilities : - The 'SetLogFilePath' method allows creation of a log file...
Kerio Control Detection
Kerio Control formerly known as Kerio WinRoute is installed on the remote Windows host. It acts as a software-based firewall. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51388; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...
SmartFTP Detection
SmartFTP, an FTP client for Windows, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid50574; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"SmartFTP Detection";...
HP Systems Insight Control Detection
HP Systems Insight Control implements infrastructure management and has the ability to deploy, migrate, monitor, control, and optimize IT infrastructure through a management console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50539; scriptversion"1.7";...
Symantec IM Manager < 8.4.16 Multiple SQL Injections (SYM10-010)
The version of Symantec IM Manager installed on the remote Windows host is earlier than 8.4.16. Such versions are reportedly affected by multiple SQL injection vulnerabilities in its administration console. An unauthenticated, remote attacker may be able to exploit these issues to compromise the...
Shockwave Player < 11.5.9.615
The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...
MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)
The version of the Local Security Authority Subsystem Service LSASS installed on the remote Windows host does not properly handle malformed packets in LDAP messages when used in conjunction with Microsoft Active Directory / Active Directory Application Mode / Active Directory Lightweight Director...
TeamViewer Connection Handling Remote Overflow Denial of Service
The version of TeamViewer installed on the remote Windows host is earlier than 5.0.8421. Such versions are affected by a remote denial of service vulnerability when receiving data from clients. By sending malformed packets to the server, a remote attacker can cause CPU usage to stay at 100% for t...
Adobe Reader < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)
The version of Adobe Reader installed on the remote host is earlier than 9.4 / 8.2.5. Such versions are affected by multiple code execution vulnerabilities. Note that there have been reports that one or more of these issues are being actively exploited in the wild. C Tenable Network Security, Inc...
Apple iTunes < 10.0 Multiple (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 10.0. Such versions are affected by numerous issues in the WebKit component. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49086; scriptversion"1.13"; scriptcvsdate"Date: 2018/11/15...
Shockwave Player < 11.5.8.612
The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.8.612. Such versions are potentially affected by the following issues : - Multiple memory corruption issues exist that could lead to arbitrary code execution. CVE-2010-2863, CVE-2010-2864,...
MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214) (remote check)
The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...
Yahoo Toolbar Internet Explorer 6 Policy Bypass
Yahoo! Toolbar is a toolbar for web browsers and can be installed on the Internet Explorer and Firefox browsers. It allows access to several functions, including Yahoo! Search and Yahoo! Mail. It also contains built-in algorithms to prevent pop-ups and spyware. A policy bypass situation occurs wh...
MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)
The TCP/IP stack installed on the remote Windows host is affected by one or more of the following vulnerabilities : - An error exists in the Windows TCP/IP stack when processing specially crafted IPv6 packets with a malformed extension header that could cause the affected system to stop respondin...
Safari < 5.0.1 Multiple Vulnerabilities
The version of Safari installed on the remote Windows host is earlier than 5.0.1. Such versions are potentially affected by numerous issues in the following components : - Safari - WebKit C Tenable Network Security, Inc. if NASLLEVEL 3000 exit1; include"compat.inc"; if description scriptid47888;...
CVE-2010-1969
Cross-site scripting XSS vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...