Google Chrome < 99.0.4844.74 Multiple Vulnerabilities

Binary data 701394.pasl...

VISAM Automation Base (VBASE) Web-Remote Detection

Binary data visamvbasewebremotedetect.nbin...

PHP 8.1.x < 8.1.3 Use After Free Vulnerability

According to its self-reported version number, the version of PHP running on the remote web server is 7.4.x prior to 7.4.28, 8.0.x prior to 8.0.16 or 8.1.x prior to 8.1.3. It is, therefore, affected by a use after free vulnerability due to phpfilterfloat failing for ints. Note that the scanner ha...

Google Chrome < 98.0.4758.102 Multiple Vulnerabilities

Binary data 701392.pasl...

Apache Tomcat < 10.0.16 Multiple Vulnerabilities

Binary data 701386.pasl...

Apache Log4Shell RCE detection via callback correlation (Direct Check MSRPC)

Binary data apachelog4shellmsrpc.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check POP3)

Binary data apachelog4shellpop3.nbin...

Apache Log4Shell RCE detection via callback correlation (Direct Check SMTP)

Binary data apachelog4shellsmtp.nbin...

ManageEngine ADAudit Plus Detection

Binary data manageengineadauditplusdetect.nbin...

Apache 2.4.10 < 2.4.44 Source Code Disclosure

Due to a lack of control over an Apache error when using php-cgi and ModSecurity, it is possible for an attacker to obtain the source code of requested page in the error response via a specially crafted request containing the Content-Length header with an incorrect value. No source data...

Apache HTTP Server 2.4.49 & 2.4.50 Path Traversal (CVE-2021-42013)

Binary data apache2450pathtraversal.nbin...

WordPress 5.5.x < 5.5.7 Expired DST Root CA X3 Certificate

According to its self-reported version number, the detected WordPress application is affected by an expired certificate. The wordpress/wp-includes/certificates/ca-bundle.crt file still contains the DST Root CA X3 expired certificate. Note that the scanner has not tested for these issues but has...

Google Chrome < 95.0.4638.54 Multiple Vulnerabilities

Binary data 701375.pasl...

Google Chrome < 94.0.4606.71 Multiple Vulnerabilities

Binary data 701369.pasl...

Apache Tomcat < 9.0.44 Vulnerability

Binary data 701365.pasl...

Apache Tomcat < 8.5.64 Vulnerability

Binary data 701366.pasl...

Apache Tomcat < 10.0.4 Vulnerability

Binary data 701364.pasl...

Microsoft SharePoint Server 2013 < 15.0.5311.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source da...

Rockwellautomation Factorytalk Improper Restriction of Operations within the Bounds of a Memory Buffer

In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installi...

Siemens Sinumerik Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC TDC CPU555 All versions, SINUMERIK 840D sl All versions. Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port...