268 matches found
RHEL 6 : chromium-browser (RHSA-2019:1477)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1477 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 75.0.3770.80. Security Fixes:...
CVE-2019-1726
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...
Cisco NX-OS Command Injection Vulnerability (CNVD-2019-14614)
Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A command injection vulnerability exists in the CLI of Cisco NX-OS. The vulnerability stems from insufficient validation of parameters...
UBUNTU-CVE-2019-0217
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in modauthdigest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions...
Oracle Enterprise Manager Cloud Control Plugins Detection (credentialed check)
Binary data oracleenterprisemanagerpluginsinstalled.nbin...
Windows NetBIOS / SMB Remote Host Report Tag
Either SMB or NetBIOS was used to determine the the device's hostname. Note that this plugin creates a tag for the host but does not itself generate a report. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid118730; scriptversion"1.6";...
Apple iTunes < 12.9 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209140 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
CVE-2018-10626
Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...
McAfee Endpoint (Drive) Encryption Installed (credentialed check)
Binary data mcafeeendpointdriveencryptioninstalled.nbin...
PT-2018-16564 · Siemens · Rapidpoint 500 +2
Name of the Vulnerable Software and Affected Versions: RAPIDLab 1200 systems versions prior to V3.3 RAPIDPoint 400 systems all versions RAPIDPoint 500 systems versions prior to V3.0 RAPIDPoint 500 systems version V2.4.X RAPIDPoint 500 systems versions prior to V2.3 Description: A security issue h...
CVE-2018-4845: Improper Access Control
A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems All versionswithout use of Siemens Healthineers Informatics products, RAPIDLab 1200 Series All versions = V3.0 with Siemens Healthineers Informatics products, RAPIDPoint 500 systems...
Apple iTunes < 12.7.5 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the HT208852 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
CVE-2017-17478
An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and 7.2.2. A user with developer credentials can insert malicious code up to 64 characters into a text field in Designer Studio, after establishing context. Designer Studio is the...
Microsoft Access Installed (credentialed check)
Binary data microsoftaccessinstalled.nbin...
Apple iTunes < 12.6.1 WebKit Memory Corruption RCE (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.6.1. It is, therefore, affected by a remote code execution vulnerability due to memory corruption caused by improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convinci...
IBM MQ Unsupported Version Detection (credentialed check)
According to its self-reported version number, the installation of IBM MQ formerly IBM WebSphere MQ on the remote Windows host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...
Pawn Storm: The Power of Social Engineering
In our latest report on Pawn Storm a.k.a. APT28, Fancy Bear, Strontium, etc., researchers expose the scope and scale of the cyber espionage group’s attacks but more importantly their cyber tradecraft. Our researchers have observed activity going back seven years targeting government, military,...
EMC Avamar ADS / AVE Installed (credentialed check)
Binary data emcavamarserverinstallednix.nbin...