Cisco TelePresence CE Arbitrary File Write (cisco-sa-roomos-trav-beFvCcyu)

According to its self-reported version, Cisco TelePresence Collaboration Endpoint Software is affected by an arbitrary file write vulnerability. Due to improper access controls on files in the that are in the local system, a local attacker can place a symbolic link in a specific location in the...

Juniper Junos OS Vulnerability (JSA70213)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70213 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon flowd of Juniper Networks Junos OS allows a network-based, unauthenticated...

PHP 8.1.x < 8.1.14

The version of PHP installed on the remote host is prior to 8.1.14. It is, therefore, affected by a vulnerability as referenced in the Version 8.1.14 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

Autodesk DWG TrueView 2023 < 2023.1.1 RCE

The remote host has an install of Autodesk DWG TrueView version 2023 prior to 2023.1.1. It is, therefore, affected by a remote code execution vulnerability due to DLL search order hijacking. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Security Updates for Microsoft .NET Framework (April 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a denial of service vulnerability. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates...

Google Chrome < 108.0.5359.94 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.94. It is, therefore, affected by a vulnerability as referenced in the 202212stable-channel-update-for-desktop advisory. - Type Confusion in V8. CVE-2022-4262 Note that Nessus has not tested for this issue bu...

Mattermost Server < 7.4.0 DoS (MMSA-2022-00124)

The version of Mattermost Server running on the remote host is prior to 7.4.0. It is, therefore, affected by a denial of service DoS vulnerability. An authenticated, remote attacker can crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data. No...

Google Chrome < 108.0.5359.94 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.94. It is, therefore, affected by a vulnerability as referenced in the 202212stable-channel-update-for-desktop advisory. - Type Confusion in V8. CVE-2022-4262 Note that Nessus has not tested for this issue but...

ManageEngine AssetExplorer 6.9 Build 6980 XXE

An XML external entity XXE vulnerability exists in ManageEngine AssetExplorer 6.9 Build 6980 due to a flaw in the Analytics Plus integration. Threat actors with admin role access can retrieve local files from the server running the affected products. Note that Nessus has not tested for this issue...

Cisco IOS XE Software for cBR 8 Converged Broadband Routers Common Open Policy Service Denial of Service (cisco-sa-cbr8-cops-Vc2ZsJSx)

According to its self-reported version, Cisco IOS-XE Software for Cisco cBR-8 Converged Broadband Routers is affected by a DoS vulnerability in the Common Open Policy Service COPS. A deadlock condition exists in the COPS packet processing that could allow allow an unauthenticated, remote attacker...

SAP NetWeaver AS ABAP URL Redirection (3251202)

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information. Note that Nessus has not tested for this issue but has instead relie...

Google Chrome < 107.0.5304.106 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.106. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on...

Cisco Secure Email and Web Manager (SMA) HTTP Response Header Injection (cisco-sa-ESA-HTTP-Inject-nvsycUmR)

According to its self-reported version, Cisco Secure Email and Web Manager SMA is affected by a vulnerability due to a failure to sanitize input values. An unauthenticated, remote attacker can exploit this, by injecting malicious HTTP headers, in order to conduct an HTTP response splitting attack...

Security Updates for Microsoft Office Products (October 2022)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...

Security Updates for Microsoft SharePoint Server 2013 (October 2022)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 70300 C Tenable,...

Security Updates for Microsoft SharePoint Server Subscription Edition (October 2022)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2022)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL...

Security Updates for Microsoft Office Products (Sept 2022) (macOS)

The Microsoft Office product installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Security Updates for Microsoft Dynamics 365 (on-premises) (September 2022)

The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to execute unauthorized arbitrary commands in the context of the dbowner. CVE-2022-34700,...

Tenable SecurityCenter 5.19.x / 5.20.x / 5.21.0 Moment.js Denial of Service (TNS-2022-18) (deprecated)

This plugin has been deprecated and replaced with plugin ID 163634. %NASLMINLEVEL 80900 C Tenable, Inc. @DEPRECATED@ Disabled on 2022/09/22. Deprecated by securitycenter5220tns202207.nasl. include'compat.inc'; if description scriptid164841; scriptversion"1.5";...