37 matches found
MAL-2026-4551 Malicious code in encrata-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98813f52fa8e9fc3c04bffd023445dbfed4a9b405d1e3f85511673f5e86dce7 package.json declares "postinstall": "node install.js", which runs at install time. install.js requires both childprocess and https, branches on...
EUVD-2026-15021
Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour...
Real-time File Access Monitoring (FAM) with Qualys FIM
What is File Access Monitoring FAM? FAM is a security practice that involves tracking and logging access to sensitive files. FAM should be included with any File Integrity Monitoring FIM solution to trigger alerts when critical host files not intended for regular use are accessed. Importance of F...
aiohttp Detection (HTTP)
HTTP based detection of aiohttp. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.112839";...
IceWarp Mail Server Detection (SMTP)
SMTP based detection of IceWarp Mail Server. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TheServer Detection
Checks whether TheServer is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
Microsoft Office 2016 Security Feature Bypass Vulnerability (KB4462146)
This host is missing an important security update according to Microsoft KB4462146 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office: Mime Sniffing Safety Feature
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officemimesniffingsafety.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Mime Sniffing Safety Feature Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...
Crestron Device Detection (CTP)
Crestron Terminal Protocol CTP based detection of Crestron devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SAP HANA Information Disclosure Vulnerability (CNVD-2018-03088)
SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. An information disclosure vulnerability exists in SAP HANA. A remote attacker can exploit this...
Microsoft PowerPoint 2007 Service Pack 3 Remote Code Execution Vulnerability (KB3213642)
This host is missing an important security update according to Microsoft KB3213642. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Office Web Apps Multiple Vulnerabilities (3199168)
This host is missing an important security update according to Microsoft Bulletin MS16-133 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...
Juniper Networks Junos OS Multiple Privilege Escalation Vulnerabilities
Junos OS is prone to multiple privilege escalation vulnerabilities in JunOS CLI. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Faraday v1.0.21 - Collaborative Penetration Test and Vulnerability Management Platform
Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time, letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...
Tenable Network Security Tenable Nessus Host Details Component Cross-Site Scripting Vulnerability
Tenable Network Security Tenable Nessus is an open source vulnerability scanner from Tenable Network Security, USA. A cross-site scripting vulnerability in the Host Details component of Tenable Network Security Tenable Nessus 5.x and earlier and 6.5.4 and earlier can be exploited by remote...
Tenable Nessus < 6.5.5 Host Details Scan Results XSS
According to its version, the Tenable Nessus application running on the remote host is prior to 6.5.5. It is, therefore, affected by a cross-site scripting XSS vulnerability in the Host Details section due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can...
Microsoft Edge Detection (Windows SMB Login)
Detects the installed version of Microsoft Edge. The script logs in via smb, detects the version of Microsoft Edge on remote host and sets the KB. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
PYSEC-2014-114
Cross-site scripting XSS vulnerability in lua/hostdetails.lua in ntopng 1.1 allows remote attackers to inject arbitrary web script or HTML via the host parameter...
McAfee VirusScan Enterprise Detection (Windows SMB Login)
Detects the installed version of McAfee VirusScan Enterprise. The script detects the version of McAfee VirusScan Enterprise. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Create System Characteristics for NIST Windows OVAL Definitions
Create a System Characteristics elements as defined by the OVAL specification for NIST Windows.xml and store it in the Knowledge Base. Note: The created System Characteristics are shown in a separate VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a...