Slackware Linux 15.0 openssl Vulnerability (SSA:2024-295-01)

The version of openssl installed on the remote host is prior to 1.1.1zb. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-295-01 advisory. New openssl packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding description bloc...

Adobe Animate 16.x < 16.0.0.112 A Vulnerability (APSB16-38)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 16.0.0.112. It is, therefore, affected by a vulnerability as referenced in the apsb16-38 advisory. - Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful...

Adobe Animate 20.x < 20.0.0 A Vulnerability (APSB19-34)

The version of Adobe Animate installed on the remote Windows host is prior to 20.0.0. It is, therefore, affected by a vulnerability as referenced in the apsb19-34 advisory. - Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Adobe Digital Editions < 4.5.10 Information Disclosure (APSB19-04) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.10. It is, therefore, affected by a vulnerability as referenced in the APSB19-04 advisory. - Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation...

Adobe Bridge 10.x < 10.0 Multiple Vulnerabilities (APSB19-53)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-53 advisory. - Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation...

Adobe Media Encoder < 14.0.3 Arbitrary Code Execution (APSB20-10)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.0.3. It is, therefore, affected by a vulnerability as referenced in the APSB20-10 advisory. - Adobe Media Encoder versions 14.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation cou...

Ubuntu 24.10 : cups-browsed vulnerability (USN-7042-3)

The remote Ubuntu 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7042-3 advisory. USN-7042-2 released an improved fix for cups-browsed. This update provides the corresponding update for Ubuntu 24.10. Tenable has extracted the preceding description...

Adobe After Effects < 17.0.4 Arbitrary code execution (APSB20-09) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 17.0.4. It is, therefore, affected by a vulnerability as referenced in the APSB20-09 advisory. - Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation cou...

Adobe After Effects < 17.0.6 Information Disclosure (APSB20-21) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 17.0.6. It is, therefore, affected by a vulnerability as referenced in the APSB20-21 advisory. - Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation coul...

Adobe Prelude < 8.1.1 Arbitrary code execution (APSB19-35)

The version of Adobe Prelude installed on the remote Windows host is prior to 8.1.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-35 advisory. - Adobe Prelude CC versions 8.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Adobe Audition < 13.0.7 Multiple Arbitrary Code Execution (APSB20-40) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 13.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-40 advisory. - Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. Successful exploitation coul...

Adobe Connect <= 11.9.975.228 Vulnerability (APSB16-17)

The version of Adobe Connect installed on the remote host is prior to 11.9.976.291. It is, therefore, affected by a vulnerability as referenced in the apsb16-17 advisory. - Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local use...

Adobe Premiere Pro < 14.2 Information Disclosure (APSB20-27) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 14.2. It is, therefore, affected by a vulnerability as referenced in the APSB20-27 advisory. - Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead...

Photon OS 5.0: Linux PHSA-2024-5.0-0385

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0385. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 7 : 389-ds-base (ELSA-2024-7434)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7434 advisory. 1.3.11.1-5.0.3 - Security fix for CVE-2024-8445 Orabug: 37119399CVE-2024-8445 Tenable has extracted the preceding description block directly from the Oracle Lin...

Devolutions Remote Desktop Manager Information Disclosure (DEVO-2024-0014)

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions. Note that Nessus has not tested for thi...

Palo Alto GlobalProtect Agent Local Privilege Escalation (CVE-2024-9473)

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to insta...

Remote Desktop client for Windows RCE (October 2024)

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote-code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

JetBrains YouTrack < 2024.3.46677 Improper Access Control

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.46677. It is, therefore, affected by a vulnerability as referenced in the 2024346677 advisory. - In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to dele...

Ubuntu 24.10 : OATH Toolkit vulnerability (USN-7059-2)

The remote Ubuntu 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7059-2 advisory. USN-7059-1 fixed a vulnerability in OATH Toolkit library. This update provides the corresponding update for Ubuntu 24.10. Tenable has extracted the preceding...