Mozilla Thunderbird < 78.0

The version of Thunderbird installed on the remote Windows host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-29 advisory. - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler reported...

Google Chrome < 84.0.4147.89 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 84.0.4147.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 202007stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allow...

Mozilla Firefox < 78.0

The version of Firefox installed on the remote Windows host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-24 advisory. - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler reported memory...

Wireshark 3.2.x < 3.2.5 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.2.5. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.5 advisory. - In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in...

Apple iCloud 7.x < 7.17 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.17. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to multiple memory corruption issues. An unauthenticated,...

Adobe Premiere Rush Installed

Adobe Premiere Rush, a video editing application, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid137652; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Adobe Premiere...

Adobe Premiere Rush <= 1.5.12 Arbitrary Code Execution (APSB20-39)

The version of Adobe Premiere Rush installed on the remote Windows host is version less than or equal to 1.5.12. It is, therefore, affected by out-of-bounds read and write vulnerabilities that could lead to arbitrary code execution. Note that Nessus has not attempted to exploit these issues but h...

Adobe Premiere Pro < 14.3 Multiple Arbitrary Code Execution (APSB20-38)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-38 advisory. - Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitatio...

Dell SupportAssist Multiple Vulnerabilities (DSA-2019-051)

The Dell SupportAssist Client versions prior to 3.2.0.90, installed on the remote Windows host reportedly is affected by multiple vulnerabilities : - An improper origin validation vulnerability exist in Dell SupportAssist Client versions prior to 3.2.0.90. An unauthenticated remote attacker could...

Plex Media Server < 1.18.2 Privilege Escalation

According to its self-reported version number, the version of Plex Media Server installed on the remote Windows host is prior to 1.18.2. It is, therefore, affected by a local privilege escalation vulnerability. The vulnerability exists in the Plex Update Service due to exposed functionality over ...

VLC < 2.1.4 DoS

A denial of service DoS vulnerability exists in VLC media player. An unauthenticated, remote attacker can exploit this issue, by tricking a user into opening a specially crafted .png file, to cause the application to stop responding. C Tenable Network Security, Inc. include'compat.inc'; if...

CVE-2020-1259

A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Windows Host Guardian Service Security Feature Bypass Vulnerability'...

Adobe Flash Player <= 32.0.0.371 (APSB20-30)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 32.0.0.371. It is, therefore, affected by an use after free vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code within the...

Mozilla Thunderbird < 68.9.0

The version of Thunderbird installed on the remote Windows host is prior to 68.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-22 advisory. - Mozilla developers Tom Tung and Karl Tomlinson reported memory safety bugs present in Firefox 68.8. Some of these...

Mozilla Firefox ESR < 68.9

The version of Firefox ESR installed on the remote Windows host is prior to 68.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-21 advisory. - Mozilla developers Tom Tung and Karl Tomlinson reported memory safety bugs present in Firefox 76 and Firefox ESR...

Adobe Premiere Pro < 14.2 Information Disclosure (APSB20-27)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 14.2. It is, therefore, affected by a vulnerability as referenced in the APSB20-27 advisory. - Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could le...

VLC < 3.0.5 Denial of Service and/or Infoleak Vulnerability

The version of VLC media player installed on the remote host with version 3.0.4. It is, therefore, affected by a denial of service and/or a potential infoleak vulnerability. CVE-2018-19857. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid136895; scriptversion"1.5";...

Wireshark 2.6.x < 2.6.17 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 2.6.17. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.6.17 advisory. - The NFS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire...

Google Chrome < 83.0.4103.61 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 83.0.4103.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 202005stable-channel-update-for-desktop19 advisory. - Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a...

Security Update for .NET Core SDK (May 2020)

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x 2.1.514 or 2.1.611 or 2.1.806, or 3.1.x 3.1.104 or 3.1.202. It is, therefore, affected by a denial of service vulnerability due to an unspecified flaw related to handling web requests. An unauthenticated, remote attacker...