CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

Foxit PhantomPDF < 9.5.0 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.10. It is, therefore, affected by multiple vulnerabilities: - A heap-based buffer overflow condition exists in the proxyCPDFAction, proxyCheckLicence,...

Google Chrome < 74.0.3729.108 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 74.0.3729.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 201904stable-channel-update-for-desktop23 advisory. - Inappropriate implementation in Blink in Google Chrome prior to...

Wireshark 2.6.x < 2.6.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.8 advisory. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was...

CVE-2019-5512

VMware Workstation 15.x before 15.0.3, 14.x before 14.1.6 running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege...

KB4493478: Security update for Adobe Flash Player (April 2019)

The remote Windows host is missing security update KB4493478. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in Adobe Flash. An unauthenticated, remote attacker could exploit this to execute arbitrary code. CVE-2019-7096 - An information disclosure...

Mozilla Thunderbird < 60.6.1

The version of Thunderbird installed on the remote Windows host is prior to 60.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-12 advisory. - Incorrect handling of \proto\ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for...

Mozilla Firefox ESR < 60.6.1

The version of Firefox ESR installed on the remote Windows host is prior to 60.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-10 advisory. - Incorrect handling of \proto\ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for...

Security Update for .NET Core (January 2019)

The remote Windows host has an installation of .NET Core with a version 2.1.x 2.1.7 or 2.2.x 2.2.1. It is, therefore, affected by the following vulnerabilities: - An information disclosure vulnerability exists in .NET Core. An unauthenticated, remote attacker can exploit this to bypass cross-orig...

LibreOffice < 5.4.7 or 6.x < 6.0.4 Information Disclosure

The version of LibreOffice installed on the remote Windows host is either prior to 5.4.7 or 6.x prior to 6.0.4. It is, therefore, affected by an information disclosure vulnerability that exists in documents containing an embedded SMB link due to automatic initiation of image retrieval. An...

Google Chrome < 73.0.3683.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 73.0.3683.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201903stable-channel-update-for-desktop12 advisory. - Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a...

Atlassian SourceTree 0.5a < 3.0.17 Multiple remote code execution vulnerabilities

The version of Atlassian SourceTree installed on the remote Windows host is version 0.5a prior to 3.0.17. It is, therefore, affected by multiple remote code execution vulnerabilities. - An option injection vulnerability exists in the git submodule component. An unauthenticated, remote attacker ca...

VMSA-2019-0002:VMware Workstation update addresses elevation of privilege issues.

VMSA-2019-0003 VMware Horizon update addresses Connection Server information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2019-0003 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware Horizon update addresses...

Mozilla Firefox ESR < 60.5.1

The version of Firefox ESR installed on the remote Windows host is prior to 60.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-05 advisory. - A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially...

Mozilla Firefox < 65.0.1

The version of Firefox installed on the remote Windows host is prior to 65.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-04 advisory. - A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially exploitab...

Adobe ColdFusion < 11.x < 11u16 / 2016.x < 2016u8 / 2018.x < 2018u2 Multiple Vulnerabilities (APSB19-10)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 11.x update 16, 2016.x update 8, or 2018.x update 2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-10 advisory. - Deserialization of untrusted data potentially leading to Arbitrar...

Mozilla Firefox ESR < 60.5

The version of Firefox ESR installed on the remote Windows host is prior to 60.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-02 advisory. - An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to...

Adobe Digital Editions < 4.5.10 Information Disclosure (APSB19-04)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.10. It is, therefore, affected by a vulnerability as referenced in the APSB19-04 advisory. - Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation...

Adobe Acrobat < 2015.006.30464 / 2017.011.30113 / 2019.010.20069 Multiple Vulnerabilities (APSB19-02)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30464, 2017.011.30113, or 2019.010.20069. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier,...

Adobe Reader < 2015.006.30464 / 2017.011.30113 / 2019.010.20069 Multiple Vulnerabilities (APSB19-02)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30464, 2017.011.30113, or 2019.010.20069. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier,...