Drupal Theme System Template Local File Inclusion

The version of Drupal running on the remote web server fails to filter input to the 'templatefile' argument of the 'themerendertemplate' function before using it in 'includes/themes.inc' to include PHP code. When Drupal is running on a Windows host, an unauthenticated attacker can exploit this...

Flash Player APSB09-01 Multiple Vulnerabilities

Binary data 4937.prm...

TightVNC Viewer < 1.3.10 Multiple Integer Overflows

The installed version of TightVNC Viewer is earlier than 1.3.10. Such versions reportedly miscalculate a buffer size on the heap. If an attacker can trick a user on the remote host into connecting to a malicious server, he can probably exploit this issue using specially crafted messages to execut...

Safari < 3.2.2 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 3.2.2. Such versions reportedly have multiple security vulnerabilities : - Input validation issues in their handling of 'feed:' URLs, which could be abused to execute arbitrary JavaScript code in the local security zone. -...

ESET Remote Administrator < 3.0.105 Additional Report Settings XSS

ESET Remote Administrator is installed on the remote system. The installed version is less than version 3.0.105, and such versions are reportedly affected by an HTML injection vulnerability. An attacker can exploit this vulnerability to cause arbitrary HTML and script code to be executed with in...

Symantec AppStream Client LaunchObj ActiveX Control Multiple Unsafe Methods (SYM09-001)

The version of the LaunchObj ActiveX control, a component included with Symantec AppStream Client / Altiris Streaming Agent and installed on the remote Windows host, reportedly contains a number of unsafe methods, such as 'installAppMgr', that can be used to download and execute arbitrary code. I...

Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.1 or earlier. Such versions are potentially affected by several vulnerabilities APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18: - A potential port-scanning issue. CVE-2007-4324 - Possible privilege escalation...

Flash Player APSB08-18 / APSB08-20 Multiple Vulnerabilities

Binary data 4746.prm...

Spybot Search & Destroy Detection

The remote Windows host has a spyware detection program installed on it. Description : The remote Windows host is running Spybot Search & Destroy, a privacy enhancing application that can detect and remove spyware of different kinds from your computer. OpenVAS Vulnerability Test $Id:...

Spybot Search & Destroy Detection

The remote Windows host is running Spybot Search & Destroy, a privacy enhancing application that can detect and remove spyware of different kinds from your computer. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav and Tenable Network Security Some text descriptions might be excerpted from a...

RealVNC VNC Viewer < 4.1.3/4.4.3 Arbitrary Command Execution

The version of RealVNC's VNC Viewer installed on the remote Windows host is affected by multiple issues : - An error in the 'CMsgReader::readRect' function in 'common/rfb/CMsgReader.cxx' that comes into play when processing encoding types, may allow arbitrary code execution on the remote system. ...

Sun xVM VirtualBox < 1.6.4 Privilege Escalation Vulnerability PoC

Exploit for multiple platform in category dos / poc ================================================================= Sun xVM VirtualBox 1.6.4 Privilege Escalation Vulnerability PoC ================================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cor...

Sun xVM VirtualBox < 1.6.4 Local Privilege Escalation

The remote host contains a version of Sun xVM VirtualBox, an open source virtualization platform, before 1.6.4. Such versions reportedly include a kernel driver, 'VBoxDrv.sys', that allows a local user to open the device '.\VBoxDrv' and issue IOCTLs with a buffering method of 'METHODNEITHER'...

Foxit Reader Detection

Foxit Reader, a free PDF file viewer, is installed on the remote Windows host. C Tenable, Inc. include"compat.inc"; if description scriptid32395; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/07/09"; scriptxrefname:"IAVT", value:"0001-T-0605";...

Cisco Security Agent Detection

Cisco Security Agent, an endpoint security application system is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32130; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Akamai Download Manager ActiveX Control < 2.2.3.5 Remote Code Execution

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly allows downloading and automatic execution of arbitrary code. If an attacker can trick a user on the affected ho...

VLC Detection

VLC, a free and portable media player from the VideoLAN organization, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31852; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

SwiftView Viewer Plugin < 8.3.5 Buffer Overflow

A SwiftView Viewer ActiveX control and/or browser plug-in is installed on the remote Windows host. SwiftView Viewer is an application for viewing and printing print streams. According to its version, the SwiftView ActiveX control / browser plug-in currently installed is affected by a stack-based...

iMesh P2P Client Detection

iMesh is installed on the remote Windows host. iMesh is a peer-to- peer file sharing application. Make sure the use of this program fits with your corporate security policy. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29729; scriptversion"1.15";...

Symantec Mail Security for SMTP File Parsing Vulnerabilities

Symantec Mail Security for SMTP, which provides anti-spam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host reportedly is affected by multiple vulnerabilities caused by buffer...