RHEL 9 : nodejs and nodejs-nodemon (RHSA-2023:2655)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2655 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

Siemens SCALANCE W1750D Command Injection (CVE-2021-37727)

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant IAP versions: 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3...

Fedora 35 : python3-docs / python3.10 (2022-7c5789009a)

The remote Fedora 35 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-7c5789009a advisory. Python 3.10.8 is the newest major release of the Python programming language, and it contains many new features and optimizations...

Oracle Linux 9 : expat (ELSA-2022-5244)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5244 advisory. - Improve fix for CVE-2022-25313 - Related: CVE-2022-25313 - Resolves: CVE-2022-25314 Tenable has extracted the preceding description block directly fr...

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2022:0333-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0333-1 advisory. - CVE-2022-23033: Fixed guestphysmapremovepage not removing the p2m mappings. XSA-393 bsc1194576 -...

Siemens JT2Go < 13.1.0.3 Code Execution (SSA-645530)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.1.0.3. It is, therefore, affected by a code execution vulnerability. The TIFFloader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an...

Ubuntu 16.04 LTS / 18.04 LTS : Python vulnerability (USN-4581-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4581-1 advisory. It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF...

Apple iCloud 7.x < 7.17 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.17. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to multiple memory corruption issues. An unauthenticated,...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4533)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4533 advisory. - ext4: validate that metadata blocks do not overlap superblock Theodore Ts'o Orabug: 28220576 CVE-2018-1094 Tenable has extracted the preceding...

Fortinet FortiOS 5.2.x < 5.2.3 Multiple XSS

The remote FortiGate device is running a version of FortiOS that is 5.2.x prior to 5.2.3. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - Multiple cross-site scripting vulnerabilities exists due to improper validation of user-supplied input to the user group and vp...

Blue Coat ProxySG 6.5.x Multiple OpenSSL Vulnerabilities

The remote Blue Coat ProxySG device's SGOS self-reported version is 6.5 prior to 6.5.4.4 and, therefore, contains a bundled version of OpenSSL that contains multiple flaws. It is, therefore, potentially affected by the following vulnerabilities : - An error exists in the function 'ssl3readbytes'...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2014-3018)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3018 advisory. 3.8.13-26.2.3.el6uek - net: ipv4: current groupinfo should be put after using. Wang, Xiaoming Orabug: 18603523 CVE-2014-2851 Tenable has extracted the preceding...

Google Chrome < 33.0.1750.152 (Mac) Multiple Vulnerabilities

Binary data 8163.pasl...

Printer Version Information Scanner

This module scans for printer version information using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Version Informatio...

Flash Player <= 10.3.183.90 / 11.7.700.224 Multiple Vulnerabilities (APSB13-17)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal or prior to 10.3.183.90, or 11.x equal or prior to 11.7.700.224. It is, therefore, potentially affected by multiple vulnerabilities : - A heap based buffer overflow vulnerability exists that...

Flash Player <= 10.3.183.67 / 11.6.602.171 Multiple Vulnerabilities (APSB13-09)

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal or prior to 11.6.602.171, or 10.x equal or prior to 10.3.183.67. It is, therefore, potentially affected by the following vulnerabilities : - An integer overflow error exists that could lead t...

Scientific Linux Security Update : cups on SL5.x, SL6.x i386/x86_64 (20130228)

It was discovered that CUPS administrative users members of the SystemGroups groups who are permitted to perform CUPS configuration changes via the CUPS web interface could manipulate the CUPS configuration to gain unintended privileges. Such users could read or write arbitrary files with the...

MySQL 5.1/5.5 (Windows) - &#039;MySQLJackpot&#039; Remote Command Execution

FARLiGHT ELiTE HACKERS LEGACY R3L3ASE Attached is the MySQL Windows Remote Exploit post-auth, udf technique including the previously released mass scanner. The exploit is mirrored at the farlight website http://www.farlight.org. Oracle MySQL on Windows Remote SYSTEM Level Exploit zeroday All owne...

VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console

The remote ESXi is missing one or more security related Updates from VMSA-2012-0001. Summary VMware ESXi and ESX updates to third party library and ESX Service Console address several security issues. Relevant releases: ESXi 4.1 without patch ESXi410-201201401-SG ESXi 5.0 without patch...

NTR ActiveX Control < 2.0.4.8 Multiple Vulnerabilities

At least one version of the NTR ActiveX control installed on the remote Windows host is earlier than 2.0.4.8. As such, it reportedly is affected by the following vulnerabilities : - Four stack-based buffer overflows exist involving the 'bstrUrl' parameter of the 'StartModule' method, the...