Adobe Illustrator < 25.0 Multiple Vulnerabilities (APSB20-53)

The version of Adobe Illustrator installed on the remote Windows host is prior to 25.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-53 advisory. - Adobe Illustrator version 24.1.2 and earlier is affected by a memory corruption vulnerability that occurs when...

Foxit PhantomPDF < 9.7.4 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.7.4. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Guild Wars 2 Insecure Folder Permissions

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Date: 2020-10-09 Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild War...

Battle.Net 1.27.1.12428 - Insecure File Permissions Vulnerability

Exploit Title: Battle.Net 1.27.1.12428 - Insecure File Permissions Exploit Author: George Tsimpidas Software Link : https://www.blizzard.com/en-gb/download/ Battle Net Desktop Version Patch: 1.27.1.12428 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability...

HP Device Manager 4.x < 4.7 SP 13 / 5.x < 5.0.4 Multiple Vulnerabilities

According to its self-reported version number, the version of HP Device Manager installed on the remote Windows host is 4.x prior to 4.7 SP 13 or 5.x prior to 5.0.4. It is, therefore, affected by multiple vulnerabilities: - A weak cipher implementation that is susceptible to dictionary attacks...

Google Chrome < 86.0.4240.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in networking in Google Chrome prior to...

Google Chrome < 85.0.4183.121 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 85.0.4183.121. It is, therefore, affected by multiple vulnerabilities as referenced in the 202009stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a...

Google Chrome < 85.0.4183.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 85.0.4183.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 202009stable-channel-update-for-desktop advisory. - Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102...

Mozilla Thunderbird < 78.2

The version of Thunderbird installed on the remote Windows host is prior to 78.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-41 advisory. - Mozilla developers Jason Kratzer, Christian Holler, Byron Campen, Tyson Smith reported memory safety bugs present i...

Mozilla Firefox < 80.0

The version of Firefox installed on the remote Windows host is prior to 80.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-36 advisory. - Mozilla developers Jason Kratzer, Christian Holler, and Byron Campen reported memory safety bugs present in Firefox 79...

Artifex Ghostscript 9.50 Multiple Vulnerabilities

The version of Artifex Ghostscript installed on the remote Windows host is 9.50. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileg...

Adobe Acrobat < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002,...

Wireshark 3.2.x < 3.2.6 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.2.6. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.6 advisory. - In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka...

CVE-2020-11552

An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An...

Privilege escalation

An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An...

CVE-2020-11552

An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An...

CVE-2020-11552

The CVE-2020-11552 vulnerability affects ManageEngine ADSelfService Plus prior to build 6003. It is an elevation-of-privilege flaw where the product does not properly enforce privileges related to a Certificate dialog, potentially allowing an unauthenticated attacker to escalate to SYSTEM on a Wi...

Mozilla Thunderbird < 78.1

The version of Thunderbird installed on the remote Windows host is prior to 78.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-33 advisory. - Mozilla developers and community members Natalia Csoregi, Simon Giesecke, Jason Kratzer, Christian Holler, and Luke...

Foxit 3D Plugin Beta < 9.7.2.29539 RCE

The version of the Foxit 3D plugin installed on the remote Windows host is prior to 9.7.2.29539. It is, therefore affected by an Out-of-Bounds Read/Write or Heap-based Buffer Overflow vulnerability due to improper validation of data when parsing certain file with incorrect 3D annotation data. An...

Mozilla Firefox ESR < 78.1

The version of Firefox ESR installed on the remote Windows host is prior to 78.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-32 advisory. - Mozilla developers and community members Natalia Csoregi, Simon Giesecke, Jason Kratzer, Christian Holler, and Luke...