SonicWall Connect Tunnel Multiple Vulnerabilities (SNWLID-2024-0017)

According to its self-reported version, the remote installed SMA1000 Connect Tunnel client is vulnerable to a number of vulnerabilities: - The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client...

Fortinet FortiWeb OpenSSH regreSSHion Attack (CVE-2024-6387) (FG-IR-24-258)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-258 advisory. - A race condition in sshd affecting versions between 8.5p1 and 9.7p1 inclusive may allow arbitrary code execution with root...

Spring Framework < 5.3.41 / 6.0.x < 6.0.25 / 6.1.x < 6.1.14 Multiple Vulnerabilities

The remote host contains a Spring Framework version is affected by a path traversal vulnerability. - Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obta...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21247)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21247 advisory. - Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions th...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21165)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21165 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Pluggable Auth. Supported versio...

AIX (IJ4442)

The version of AIX installed on the remote host is prior to APAR IJ4442. It is, therefore, affected by a vulnerability as referenced in the IJ4442 advisory. - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth ...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21142)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21142 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21157)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21157 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21218)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21218 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21236)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21236 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

CBL Mariner 2.0 Security Update: mysql (CVE-2024-21219)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21219 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are...

Adobe FrameMaker Publishing Server 2022 < 17.0.1 (2022.0.1) Security Feature Bypass (APSB23-58)

The version of Adobe FrameMaker Publishing Server installed on the remote Windows host is prior to Adobe FrameMaker Publishing Server 2022 17.0.1. It is, therefore, affected by a vulnerability as referenced in the apsb23-58 advisory. - Adobe FrameMaker Publishing Server versions 2022 and earlier...

Adobe Media Encoder < 13.1.0 Multiple Vulnerabilities (APSB19-29)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 13.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-29 advisory. - Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead t...

Adobe After Effects < 16.1.2 (APSB19-31)

The version of Adobe After Effects installed on the remote Windows host is prior to 16.1.2. It is, therefore, affected by a vulnerability as referenced in the APSB19-31 advisory. - Adobe After Effects versions 16 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

Adobe Dimension < 3.4.4 Multiple Vulnerabilities (APSB21-116) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-116 advisory. - Adobe Dimension versions 3.4.3 and earlier are affected by an out-of-bounds write vulnerability that could result...

Adobe InDesign 12.0.0 < 13.0.0 Remote Code Execution (APSB17-38) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 13.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB17-38 advisory. - An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exist...

Adobe Illustrator < 25.1 Arbitrary code execution (APSB21-02) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 25.1. It is, therefore, affected by a vulnerability as referenced in the APSB21-02 advisory. - Adobe Illustrator version 25.0 and earlier is affected by an uncontrolled search path element that could result in arbitra...

Adobe Digital Editions < 4.5.3 Multiple Vulnerabilities (APSB16-45) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-45 advisory. - Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could...

Adobe InCopy 15.0.0 < 15.1.4 Arbitrary code execution (APSB21-05)

The version of Adobe InCopy installed on the remote host is prior to 15.1.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-05 advisory. - InCopy version 15.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitra...

Adobe InDesign 13.0 < 13.1.0 Multiple Vulnerabilities (APSB18-11) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 13.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB18-11 advisory. - Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitatio...