Mozilla Firefox < 81.0

The version of Firefox installed on the remote Windows host is prior to 81.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-42 advisory. - When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential...

Foxit PhantomPDF < 9.7.3 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.7.3. It is, therefore affected by multiple vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Juniper Junos BGP DoS (JSA11024)

According to the self reported version of Junos OS on the remote device it is affected by a denial of service vulnerability as referenced in the JSA11024 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

Photon OS 3.0: Bindutils PHSA-2020-3.0-0135

An update of the bindutils package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140409;...

Cisco NX-OS Software Call Home Command Injection (cisco-sa-callhome-cmdinj-zkxzSCY)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability due to insufficient input validation of specific Call Home configuration parameters when configured for transport method HTTP. An authenticated, remote attacker could modify parameters...

Cisco Data Center Network Manager Path Traversal (cisco-sa-dcnm-patrav-pW9RkhyW)

According to its self-reported version, Cisco Data Center Network Manager is affected by a vulnerability in a specific REST API method due to insufficient validation of user-supplied input. An authenticated, remote attacker can exploit this, by sending a crafted request to the API, in order to...

Photon OS 2.0: Bindutils PHSA-2020-2.0-0279

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 31 : 32:bind / bind-dyndb-ldap / dnsperf (2020-14c194e5af)

Upstream release notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200826)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139893;...

Cisco IOS XE Software Virtualization Manager CLI Command Injection Vulnerability (cisco-sa-20190925-vman-cmd-injection)

According to its self-reported version, Cisco IOS XE Software is affected by command injection vulnerability. A local, authenticated attacker can exploit this to execute arbitrary code as root on the underlying system. Please see the included Cisco BIDs and Cisco Security Advisory for more...

Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential (cisco-sa-rv110w-static-cred-BMTWBWTy)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by default static credential vulnerability. Due to a vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacke...

Cisco Prime Collaboration Provisioning Software SQL Injection (cisco-sa-pcp-sql-inj-22Auwt66)

According to its self-reported version, a vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. Please see the included Cisco BIDs and Cisco...

Cisco Data Center Network Manager Authentication Bypass (cisco-sa-dcnm-auth-bypass-JkubGpu3)

According to its self-reported version, Cisco Data Center Network Manager is affected by an authentication bypass vulnerability due to a failure in the software to perform proper authentication. An unauthenticated, remote attacker can exploit this, by browsing to one of the hosted URLs in Cisco...

Cisco Data Center Network Manager Improper Authorization (cisco-sa-dcnm-improper-auth-7Krd9TDT)

According to its self-reported version, Cisco Data Center Network Manager is affected by an authentication bypass vulnerability in the REST API due to insufficient authorization of certain API functions. An attacker can exploit this vulnerability by sending a crafted request to the API using...

Cisco Data Center Network Manager Command Injection (cisco-sa-devmgr-cmd-inj-Umc8RHNh)

According to its self-reported version, Cisco Data Center Network Manager is affected by a command injection vulnerability due to insufficient validation of user-supplied input. A remote, authenticated attacker can exploit this vulnerability by sending crafted arguments to a specific field within...

Cisco Data Center Network Manager SQL Injection (cisco-sa-dcnm-sql-inject-8hk6PwmF)

According to its self-reported version, Cisco Data Center Network Manager is affected by a SQL injection vulnerability due to improper validation of user-supplied input. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected...

Cisco UCS Director Stored Cross-Site Scripting Vulnerability (cisco-sa-ucs-director-xss-O7T8ORYR)

According to its self-reported version, Cisco UCS Director is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid139413; scriptversion"1.5";...

Foxit PhantomPDF < 10.0.1 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.0.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Photon OS 2.0: Grub2 PHSA-2020-2.0-0267

An update of the grub2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0267. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139243...

Cisco Unity Connection Cross-Site Scripting (cisco-sa-cucm-cuc-imp-xss-OWuSYAp)

According to its self-reported version, Cisco Unity Connection is affected by a Cross-Site Scripting vulnerabilities. An remote attacker could exploit this vulnerability by inserting malicious data into a specific data field in the web interface. A successful exploit could allow the attacker to...