Detect Managed Software Install Location (Windows) (deprecated)

This plugin has been replaced by "Detect Unmanaged Software Install Location Windows". Binary data managedsoftwarewindows.nbin...

Fedora 29 : php-Smarty2 (2018-7adf863a47)

2017-11-03 - replace functions deprecated in PHP 7.2 2016-09-11 Uwe Tews - math fix parameter checking order to avoid misleading message - math replace wrong versiom 2016-07-19 Uwe Tews - math shell injection vulnerability patch provided by Tim Weber 2015-12-30 Uwe Tews - fixed plugin filepath...

Fedora 28 : php-Smarty2 (2018-2d2739ebed)

2017-11-03 - replace functions deprecated in PHP 7.2 2016-09-11 Uwe Tews - math fix parameter checking order to avoid misleading message - math replace wrong versiom 2016-07-19 Uwe Tews - math shell injection vulnerability patch provided by Tim Weber 2015-12-30 Uwe Tews - fixed plugin filepath...

UBUNTU-CVE-2018-20815

In QEMU 3.1.0, loaddevicetree in devicetree.c calls the deprecated loadimage function, which has a buffer overflow risk...

Exiftool 8.3.2.0 DLL Hijacking

...

MiniShare 1.4.1 HEAD method buffer overflow

Added: 12/21/2018 Background MiniShare is a Windows program that allows sharing of files without additional services or software. Problem MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. Resolution MiniShare is deprecated. References...

Photon OS 1.0: Libtirpc PHSA-2018-1.0-0198 (deprecated)

An update of 'libtirpc' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0198. The text itself is copyright C VMware, Inc...

Photon OS 2.0: Kubernetes PHSA-2018-2.0-0112 (deprecated)

An update of 'kubernetes' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0112. The text itself is copyright C VMware, Inc...

Mozilla Firefox < 64.0 Multiple Vulnerabilities (macOS) (deprecated)

This plugin is a duplicate of plugin ID 122192 and has been deprecated. File data macosxfirefox640.nasl...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a privilege escalation vulnerability in Kubernetes API server

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in Kubernetes which in some cases can allow unauthorized access to the Kubernetes API Server and/or trusted user privilege escalation. Vulnerability Details CVEID: CVE-2018-1002105 DESCRIPTION: Kubernetes could allow a...

Photon OS 2.0: Linux PHSA-2018-2.0-0101 (deprecated)

An update of 'linux-secure', 'linux', 'linux-aws', 'linux-esx' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0101. The te...

Logstash JSON API Detection (deprecated)

The remote host is running Logstash, a data collection engine service written in Java. File data logstashapidetect.nasl...

Elasticsearch Detection (deprecated)

The remote host is running Elasticsearch, a distributed search engine service written in Java and possibly a security extension called X-Pack. File data elasticsearchdetect.nasl...

Missing 'X-XSS-Protection' Header

The HTTP 'X-XSS-Protection' response header is a feature of old browsers that allows websites to control their XSS auditors.\n\nThe server is not configured to return a 'X-XSS-Protection' header which means that any pages on this website could be at risk of a Cross-Site Scripting XSS attack. This...

Elastic Kibana <= 5.6.12 / >= 6.0.0, <= 6.4.2 File Inclusion Vulnerability - Windows

Elastic Kibana is prone to a file inclusion vulnerability. This VT has been deprecated as a duplicate of the following VT: Elastic Kibana 5.0 = 6.0.0, = 6.4.2 File Inclusion Vulnerability - Windows"; scriptcategoryACTGATHERINFO; scriptcopyright"Copyright C 2018 Greenbone AG"; scriptfamily"Web ap...

Security clean up /plugins/servlet/Wallboard.old 200 response

A low risk Path-Based Vulnerability exists at /plugins/servlet/Wallboard.old. Stylesheets and basic html page load for page that should not exist/deprecated...

Cross site scripting

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...

CVE-2018-18775

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product...

Cross site scripting

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...

Directory traversal

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" in the parameter subpage allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web application...