Binary Whitelisting Blacklisting System for macOS: Santa

Santa is a binary whitelisting/blacklisting system for macOS. It consists of a kernel extension that monitors for executions, a userland daemon that makes execution decisions based on the contents of a SQLite database, a GUI agent that notifies the user in case of a block decision and a...

Fedora 26 : ghostscript (2018-226dac231f)

Security fix for CVE-2018-10194. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Drupal Core Critical RCE Vulnerability (SA-CORE-2018-004) - Linux

Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; if...

MS07-033: Cumulative security update for Internet Explorer

Resolves five newly discovered, privately reported and one newly discovered, publicly disclosed vulnerability.The update that this article describes has been replaced by a newer update. To resolve this problem, install the most current cumulative security update for Internet Explorer. To install...

MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service could allow denial of service

Resolves vulnerabilities in the Microsoft Exchange and Windows SMTP Service that could allow denial of service if an attacker sent a specially crafted DNS response to a computer that is running the SMTP service.INTRODUCTIONMicrosoft has released security bulletin MS10-024. To view the complete...

MS08-037: Vulnerabilities in DNS could allow spoofing

Resolves a reported vulnerability that could allow spoofing in implementations of DNS.INTRODUCTIONMicrosoft has released security bulletin MS08-037. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

Description of Calendar Printing Assistant for Office Outlook 2007 SP3

Describes the improvements that Calendar Printing Assistant for Office Outlook 2007 SP3 provides and the issues that it fixes.IntroductionCalendar Printing Assistant for Microsoft Office Outlook 2007 Service Pack 3 SP3 provides the latest updates to Calendar Printing Assistant for Office Outlook...

MS09-073: Description of the security update for Windows XP, Windows 2000, and Windows Server 2003: December 8, 2009

MS09-073: Description of the security update for Windows XP, Windows 2000, and Windows Server 2003: December 8, 2009 Introduction Microsoft has released security bulletin MS09-073. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Adobe ColdFusion 11.x < 11u14 / 2016.x < 2016u6 Multiple Vulnerabilities (APSB18-14)

The version of Adobe ColdFusion running on the remote Windows host is 11.x prior to update 14 or 2016.x prior to update 6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109017; scriptversion"1.9";...

April 10, 2018—KB4093108 (Security-only update)

None None...

April 10, 2018—KB4093122 (Security-only update)

None None...

C5Scan - Vulnerability Scanner And Information Gatherer For The Concrete5 CMS

Vulnerability scanner and information gatherer for the Concrete5 CMS. Is a little out of date presently pending a refactor. concrete5 is an open-source content management system CMS for publishing content on the World Wide Web and intranets. concrete5 is designed for ease of use, for users with a...

March 13, 2018—KB4088877 (Monthly Rollup)

None None...

March 13, 2018—KB4088876 (Monthly Rollup)

None None...

March 13, 2018—KB4088875 (Monthly Rollup)

None None...

SSH Multiple Device Default Credentials (PCI)

The remote device is a device that uses a set of publicly known, default credentials. Knowing these, an attacker able to connect to the service can gain control of the device. WARNING: This plugin may run up to 4 hours depending on network conditions. TRUSTED...

Cisco IOS Software Quality of Service Remote Code Execution Vulnerability

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS Software Smart Install Remote Code Execution Vulnerability

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

D-Link DIR Routers OS Command Injection Vulnerability (Mar 2018)

D-Link Routers DIR-860L, DIR-865L, DIR-868L and DIR-880L are prone to an OS command injection vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2017-17668

Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities...