CVE-2024-21111

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

PaperCut NG < 20.1.10 / 21.x < 21.2.14 / 22.x < 22.1.5 / 23.x < 23.0.7 Multiple Vulnerabilities

The version of PaperCut NG installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut...

PaperCut MF < 20.1.10 / 21.x < 21.2.14 / 22.x < 22.1.5 / 23.x < 23.0.7 Multiple Vulnerabilities

The version of PaperCut MF installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut...

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

CVE-2024-0157

Dell Storage Resource Manager (SRM) for Windows includes a Session Fixation vulnerability in the SRM Windows Host Agent affecting version 4.9.0.0 and earlier. An unauthenticated attacker on an adjacent network could potentially hijack a targeted user’s application session. Public details in conne...

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

PT-2024-5633 · Dell · Dell Storage Resource Manager

Name of the Vulnerable Software and Affected Versions: Dell Storage Resource Manager version 4.9.0.0 and below Description: The issue is related to a session fixation problem in the SRM Windows Host Agent. An unauthenticated attacker on an adjacent network could exploit this, potentially leading ...

SAP BusinessObjects Business Intelligence Platform Information Disclosure (3421384)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by an information disclosure vulnerability. Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating syste...

Google Chrome < 123.0.6312.122 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 123.0.6312.122. It is, therefore, affected by multiple vulnerabilities as referenced in the 202404stable-channel-update-for-desktop10 advisory. - Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a...

KB5036892: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (April 2024)

The remote Windows host is missing security update 5036892. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

Adobe Illustrator < 27.9.3 / 28.0 < 28.4 Multiple Vulnerabilities (APSB24-25)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.3, 28.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-25 advisory. - Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that...

Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2024.1.3, 2023.1.5, 2022.1.4 or 2021.1.4. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted STP, CATPART or MODEL file in ASMKERN228A.dll when parsed through Autodesk AutoCAD c...

Trend Micro Apex One Command Execution (000294994)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12380 and Agent Build 12380. It is, therefore, affected by a vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One,...

Google Chrome < 123.0.6312.86 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 123.0.6312.86. It is, therefore, affected by multiple vulnerabilities as referenced in the 202403stable-channel-update-for-desktop26 advisory. - Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowe...

Mozilla Firefox < 124.0.1

The version of Firefox installed on the remote Windows host is prior to 124.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-15 advisory. - An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript...

Apple iTunes < 12.13.1 A Vulnerability (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.13.1. It is, therefore, affected by a vulnerability as referenced in the HT214091 advisory. - A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker may b...

National Instruments LabVIEW < 2024 Q1 Patch 1 Multiple Vulnerabilities

The version of National Instruments NI LabVIEW installed on the remote Windows host is version 2015 prior to 2024 Q1 Patch 1. It is therefore affected by multiple vulnerabilities: - An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful...

Adobe Bridge 13.x < 13.0.6 / 14.x < 14.0.2 Multiple Vulnerabilities (APSB24-15)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.6 or 14.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-15 advisory. - Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that cou...

Adobe Animate 23.x < 23.0.4 / 24.x < 24.0.1 Multiple Vulnerabilities (APSB24-19)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.4 or 24.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-19 advisory. - Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerability that cou...