Sirius - First Truly Open-Source General Purpose Vulnerability Scanner

Sirius is the first truly open-source general purpose vulnerability scanner. Today, the information security community remains the best and most expedient source for cybersecurity intelligence. The community itself regularly outperforms commercial vendors. This is the primary advantage Sirius Sca...

Google Chrome < 116.0.5845.96 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 116.0.5845.96. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308stable-channel-update-for-desktop15 advisory. - Insufficient policy enforcement in Extensions API in Google Chrome prior t...

Mozilla Firefox ESR < 102.12

The version of Firefox ESR installed on the remote Windows host is prior to 102.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-19 advisory. - Mozilla developers and community members Gabriele Svelto, Andrew McCreight, the Mozilla Fuzzing Team, Sean Feng,...

RHEL 9 : nodejs and nodejs-nodemon (RHSA-2023:2655)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2655 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

Siemens SCALANCE W1750D Command Injection (CVE-2021-37727)

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant IAP versions: 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3...

Fedora 35 : python3-docs / python3.10 (2022-7c5789009a)

The remote Fedora 35 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-7c5789009a advisory. Python 3.10.8 is the newest major release of the Python programming language, and it contains many new features and optimizations...

Oracle Linux 9 : expat (ELSA-2022-5244)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5244 advisory. - Improve fix for CVE-2022-25313 - Related: CVE-2022-25313 - Resolves: CVE-2022-25314 Tenable has extracted the preceding description block directly fr...

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2022:0333-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0333-1 advisory. - CVE-2022-23033: Fixed guestphysmapremovepage not removing the p2m mappings. XSA-393 bsc1194576 -...

Siemens JT2Go < 13.1.0.3 Code Execution (SSA-645530)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.1.0.3. It is, therefore, affected by a code execution vulnerability. The TIFFloader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an...

Ubuntu 16.04 LTS / 18.04 LTS : Python vulnerability (USN-4581-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4581-1 advisory. It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF...

Apple iCloud 7.x < 7.17 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.17. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to multiple memory corruption issues. An unauthenticated,...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4533)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4533 advisory. - ext4: validate that metadata blocks do not overlap superblock Theodore Ts'o Orabug: 28220576 CVE-2018-1094 Tenable has extracted the preceding...

Fortinet FortiOS 5.2.x < 5.2.3 Multiple XSS

The remote FortiGate device is running a version of FortiOS that is 5.2.x prior to 5.2.3. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - Multiple cross-site scripting vulnerabilities exists due to improper validation of user-supplied input to the user group and vp...

Blue Coat ProxySG 6.5.x Multiple OpenSSL Vulnerabilities

The remote Blue Coat ProxySG device's SGOS self-reported version is 6.5 prior to 6.5.4.4 and, therefore, contains a bundled version of OpenSSL that contains multiple flaws. It is, therefore, potentially affected by the following vulnerabilities : - An error exists in the function 'ssl3readbytes'...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2014-3018)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3018 advisory. 3.8.13-26.2.3.el6uek - net: ipv4: current groupinfo should be put after using. Wang, Xiaoming Orabug: 18603523 CVE-2014-2851 Tenable has extracted the preceding...

Google Chrome < 33.0.1750.152 (Mac) Multiple Vulnerabilities

Binary data 8163.pasl...

Printer Version Information Scanner

This module scans for printer version information using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Version Informatio...

Flash Player <= 10.3.183.90 / 11.7.700.224 Multiple Vulnerabilities (APSB13-17)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal or prior to 10.3.183.90, or 11.x equal or prior to 11.7.700.224. It is, therefore, potentially affected by multiple vulnerabilities : - A heap based buffer overflow vulnerability exists that...

Flash Player <= 10.3.183.67 / 11.6.602.171 Multiple Vulnerabilities (APSB13-09)

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal or prior to 11.6.602.171, or 10.x equal or prior to 10.3.183.67. It is, therefore, potentially affected by the following vulnerabilities : - An integer overflow error exists that could lead t...

Scientific Linux Security Update : cups on SL5.x, SL6.x i386/x86_64 (20130228)

It was discovered that CUPS administrative users members of the SystemGroups groups who are permitted to perform CUPS configuration changes via the CUPS web interface could manipulate the CUPS configuration to gain unintended privileges. Such users could read or write arbitrary files with the...