Adobe Animate 20.x < 20.5.2 / 21.x < 21.0.6 Multiple Vulnerabilities (APSB21-35)

The version of Adobe Animate installed on the remote Windows host is prior to 20.5.2 or 21.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-35 advisory. - Adobe Animate version 21.0.5 and earlier is affected by an Out-of-bounds Read vulnerability when parsin...

Cisco Unity Connection XSS (cisco-sa-cucm-xss-Q4PZcNzJ)

The Cisco Unity Connection installed on the remote host is prior to version 14. It is, therefore, affected by multiple cross-site Scripting vulnerabilities. Multiple vulnerabilities in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to...

RHEL 7 : kpatch-patch (RHSA-2021:1532)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1532 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Cisco Unified Communications Manager XSS (cisco-sa-cucm-xss-Q4PZcNzJ)

The version of cisco unified communications manager installed on the remote host is prior to version 14. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Multiple vulnerabilities in the web-based management interface of Cisco Unified CM, could allow an unauthenticated,...

Cisco Web Security Appliance XSS (cisco-sa-wsa-xss-mVjOWchB)

According to its self-reported version, Cisco Web Security Appliance is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit, by convincing a user to click a specially...

Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4939-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4939-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a maliciou...

Amazon Linux AMI : busybox (ALAS-2021-1496)

The version of busybox installed on the remote host is prior to 1.19.3-2.12. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1496 advisory. decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid...

Amazon Linux AMI : exim (ALAS-2021-1497)

The version of exim installed on the remote host is prior to 4.92-1.27. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1497 advisory. Prior versions of Exim 4 have Improper Neutralization of Line Delimiters. Local users can alter the behavior of root process...

Adobe Reader < 2017.011.30196 / 2020.001.30025 / 2021.001.20155 Multiple Vulnerabilities (APSB21-29) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2017.011.30196, 2020.001.30025, or 2021.001.20155. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and...

Adobe Acrobat < 2017.011.30196 / 2020.001.30025 / 2021.001.20155 Multiple Vulnerabilities (APSB21-29)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30196, 2020.001.30025, or 2021.001.20155. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and...

Security Updates for Microsoft Office Products (May 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-28455, CVE-2021-31175,...

Cisco Firepower Threat Defense Software TCP Flood DoS (cisco-sa-ftd-tcp-dos-GDcZDqAf)

According to its self-reported version, the packet processing functionality of Cisco Firepower Threat Defense FTD Software is affected by TCP flood denial of service vulnerability due to inefficient memory management. An unauthenticated, remote attacker can exploit this by sending a large number ...

Adobe Acrobat < 2017.011.30196 / 2020.001.30025 / 2021.001.20155 Multiple Vulnerabilities (APSB21-29) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2017.011.30196, 2020.001.30025, or 2021.001.20155. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and...

Siemens JT2Go < 13.1.0.1 Multiple Vulnerabilities (SSA-663999)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.1.0.1. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability has been identified in JT2Go. Affected applications lack proper validation of user-supplied data when parsing...

Juniper Junos OS DoS (JSA11168)

The version of Junos OS installed on the remote host is affected by denial of service vulnerabilities as referenced in the JSA11168 advisory: - On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daem...

RHEL 7 / 8 : AMQ Clients 2.9.1 (RHSA-2021:1511)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1511 advisory. Red Hat AMQ Clients enable connecting, sending, and receiving messages over the AMQP 1.0 wire transport protocol to or from AMQ Broker 6...

Cisco Adaptive Security Appliance Software DoS (cisco-sa-asaftd-dos-QFcNEPfx)

According to its self-reported version, the TCP packet processing of Cisco Adaptive Security Appliance Software is affected by denial of service vulnerability due to a memory exhaustion condition. An unauthenticated, remote attacker can exploit this by sending a high rate of crafted TCP traffic...

Cisco Firepower Threat Defense Software DoS (cisco-sa-asaftd-dos-QFcNEPfx)

According to its self-reported version, the TCP packet processing of Cisco Firepower Threat Defense FTD Software is affected by denial of service vulnerability due to a memory exhaustion condition. An unauthenticated, remote attacker can exploit this by sending a high rate of crafted TCP traffic...

Ubuntu 20.04 LTS : Thunderbird vulnerabilities (USN-4936-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4936-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attack...

Mozilla Firefox < 88.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 88.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-20 advisory. - When Web Render components were destructed, a race condition could have caused undefined behavior, and we...