Mozilla Firefox ESR < 68.2

The version of Firefox ESR installed on the remote Windows host is prior to 68.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-33 advisory. - Mozilla developers and community members Bob Clary, Jason Kratzer, Aaron Klotz, Iain Ireland, Tyson Smith, Christia...

Microsoft SQL Server Management Studio 18.x < 18.3.1 Multiple Vulnerabilities (October 2019)

The version of Microsoft SQL Server Management Studio installed on the remote Windows host is 18.x prior to 18.3.1. It is, therefore, affected by multiple information disclosure vulnerabilities: - An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when i...

Adobe ColdFusion 2016.x < 2016u12 / 2018.x < 2018u5 Multiple Vulnerabilities (APSB19-47)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2016.x update 12 or 2018.x update 5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-47 advisory: - An unspecified command injection vulnerability via a vulnerable component could...

Apache Struts 2.3.20 < 2.3.29 / 2.5.x < 2.5.13 Denial of Service Vulnerability (S2-041)

The version of Apache Struts running on the remote Windows host is 2.3.20 prior to 2.3.29 or 2.5.x 2.5.13. It is, therefore, affected by a denial of service vulnerability in URLValidator due to improper handling of form fields. An unauthenticated, remote attacker can exploit this, via a crafted...

Wireshark 2.6.x < 2.6.7 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.7 advisory. - In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in...

Wireshark 3.0.x < 3.0.4 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.0.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.4 advisory. - In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed...

IBM WebSphere Portal Security Bypass Vulnerability (CVE-2018-1420)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a security bypass vulnerability due to improper validaiton of user context during impersionation senarios. An authenticated, remote attacker can exploit this, to perform actions in the user or administrator...

Mozilla Thunderbird < 68.0

The version of Thunderbird installed on the remote Windows host is prior to 68.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-28 advisory. - Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code...

Mozilla Thunderbird < 60.9

The version of Thunderbird installed on the remote Windows host is prior to 60.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-29 advisory. - It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results ...

Google Chrome < 77.0.3865.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201909stable-channel-update-for-desktop advisory. - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote...

Foxit Reader 9.0 < 9.6.0.25114 Security Bypass Vulnerability

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.6.0.25114. It is, therefore affected by a security bypass vulnerability. Safe reading mode may be disabled when users update an existing installation of Foxit Reader from within the...

Apple iCloud 7.x < 7.13 / 10.x < 10.6 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.13 or 10.x prior to 10.6. It is, therefore, affected by multiple vulnerabilities: - Multiple arbitrary code execution vulnerabilities exist with in the WebKit due to improper handling of...

Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...

Apple iTunes < 12.9.6 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.6. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210356 advisory. - A remote attacker may be able to view sensitive information CVE-2019-13118 - Processing maliciously crafted web...

Apple iTunes < 12.9.6 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.6. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210356 advisory. - A remote attacker may be able to view sensitive information CVE-2019-13118 - Processing maliciously crafted web...

HP Support Assistant < 8.8 Multiple Vulnerabilities

The version of HP Support Assistant installed on the remote Windows host is prior to 8.8. It is, therefore, affected by two unspecified privilege escalation vulnerabilities. An authenticated, local attacker can exploit this, to gain system level access to the system. C Tenable Network Security,...

Foxit PhantomPDF < 9.6 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.6. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

ImageMagick < 7.0.8-35 Multiple vulnerabilities

The version of ImageMagick installed on the remote Windows host is prior to 7.0.8-35. It is, therefore, affected by multiple vulnerabilities: - A 'use of uninitialized value' vulnerability in the WriteJP2Image function in coders/jp2.c. CVE-2019-12977 - A 'use of uninitialized value' vulnerability...

Security Update for Microsoft Dynamics 365 (on-premises) (May 2019)

The version of Microsoft Dynamics 365 on-premises installed on the remote Windows host is 7.x 7.0.3.147, 8.x 8.2.6.19, 9.x 9.0.4.5. It is, therefore, affected by a security feature bypass vulnerability. An unauthenticated, remote attacker could exploit this issue, to send attachment types that ar...

Symantec Endpoint Encryption < 11.3.0 Multiple Vulnerabilities (SYMSA1485)

The version of the Symantec Endpoint Encryption SEE installed on the remote Windows host is prior to 11.3.0. It is, therefore, affected by a two privilege escalation vulnerabilities. An authenticated, local attacker could exploit these vulnerabilities to gain elevated access to the system. C...