KLA60725 DoS vulnerability in Mozilla Thunderbird

Heap buffer overflow vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2023-40 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

KLA60004 Multiple vulnerabilities in Foxit PDF Reader

Multiple vulnerabilities were found in Foxit PDF Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Code execution vulnerability can be exploited remotely to execute arbitrary code. 2...

KLA60566 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of...

KB5030261: Windows Server 2008 R2 Security Update (September 2023)

The remote Windows host is missing security update 5030261. It is, therefore, affected by multiple vulnerabilities - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - DHCP Server Service Information Disclosure Vulnerability CVE-2023-36801, CVE-2023-38152 - Windows...

KB5030213: Windows 10 Version 1607 and Windows Server 2016 Security Update (September 2023)

The remote Windows host is missing security update 5030213. It is, therefore, affected by multiple vulnerabilities - DHCP Server Service Denial of Service Vulnerability CVE-2023-38162 - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - DHCP Server Service Informati...

KLA60562 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, spoof user interface, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of...

Google Chrome < 116.0.5845.187 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 116.0.5845.187. It is, therefore, affected by a vulnerability as referenced in the 202309stable-channel-update-for-desktop11 advisory. - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp...

Foxit PDF Editor < 13.0 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 13.0. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...

Fedora 37 : clamav (2023-4576748282)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4576748282 advisory. Update to 0.103.10 CVE-2023-40477 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

KLA60810 Multiple vulnerabilities in Notepad++

Multiple vulnerabilities were found in Notepad++. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Heap buffer vulnerability in Utf816Read::convert can be exploited to execute arbitrary code...

KLA59919 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory access vulnerability in FedCM can be exploited...

Python Untrusted Search Path (CVE-2023-41105)

The version of Python installed on the remote Windows host is potentially affected by a vulnerability. Passing a path with null bytes to the os.path.normpath function causes the returned path to be unexpectedly truncated at the first occurrence of null bytes within the path. Note that Nessus has...

Fedora 37 : indent (2023-67d8bcb63c)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-67d8bcb63c advisory. This release fixes a heap buffer overwrite in searchbrace CVE-2023-40305 and a heap overread in lexi. Tenable has extracted the preceding descriptio...

Oracle Linux 7 : cups (ELSA-2020-1050)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1050 advisory. - 1651575 - CVE-2018-4700 cups - 1608764 - CVE-2018-4180 cups Tenable has extracted the preceding description block directly from the Oracle Linux...

Potential Price Slippage Due to Gaps in Consecutive Ranges

Lines of code Vulnerability details The method allows appending new Range instances without restrictions on the gap between the end of the last range and the start of the new one. Significant gaps between these ranges can result in considerable price slippages, introducing volatility in price...

Fedora 38 : python3.9 (2023-7aa64e4a41)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7aa64e4a41 advisory. Update to 3.9.18 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Vim < 9.0.1857

Use After Free flaw in vim prior to 9.0.1857. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid180544; scriptversion"1.8";...

KLA59908 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Out of bounds memory access vulnerability in FedCM can be exploited to...

CVE-2023-33831

creationtimestamp| type| source ---|---|--- 2023-09-04 21:26:55+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8967 2023-09-07 08:00:59+00:00| published-proof-of-concept| https://t.me/dilagrafie/3182 2023-09-19 00:28:42+00:00| seen| https://t.me/cibsecurity/70672...

PT-2023-24138 · Qualcomm · Qualcomm Snapdragon Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Chipsets affected versions not specified Description: The issue is related to a Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. There is no information provided about the estimated...