KLA50315 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of...

Zoom Client for Meetings < 5.13.10 Vulnerability (ZSB-23006)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23006 advisory. - Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a...

Security Updates for Microsoft Excel Products (June 2023)

The Microsoft Excel Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23014)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23014 advisory. - Improper input validation in the installer for Zoom for Windows clients before 5.14.0 may allow an authenticated user t...

Security Updates for Microsoft SharePoint Server 2019 (June 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server elevation of privilege vulnerabilty. CVE-2023-29357, CVE-2023-33142 - A Sharepoint Server spoofing vulnerability...

PT-2023-3184 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint Server,...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed vulnerabilities in Power Apps and Dynamics. An authenticated malicious person could exploit the vulnerabilities to impersonate another user and execute arbitrary code execute arbitrary code with privileges of that user. Microsoft Power Apps:...

KB5027575: Servicing stack update for Windows Server 2012: June 13, 2023

KB5027575: Servicing stack update for Windows Server 2012: June 13, 2023 IMPORTANT For Windows Server 2012, the end of support EOS date is October 10, 2023. Extended Security Updates ESUs will be available for purchase no later than October 2022, but available for installation after the EOS date,...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23013)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23013 advisory. - Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow...

Security Updates for Microsoft Exchange Server (June 2023)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Jun, 2023 security bulletin. - Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-28310, CVE-2023-32031 Note tha...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in SIMATIC, SICAM, SIMOTION, WinCC, Solid Edge and Scalance products. The vulnerabilities allow a malicious party potentially capable of carrying out attacks that can result in the following categories of damage: Denial-of-Service DoS Manipulation of data...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23012)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23012 advisory. - Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14...

Zoom Client for Meetings < 5.13.5 Vulnerability (ZSB-23010)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23010 advisory. - Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A...

Important: webkitgtk4

Issue Overview: A logic issue was addressed with improved state management. CVE-2020-22592 A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2,...

Fedora 38 : mariadb (2023-381f23a0ae)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-381f23a0ae advisory. MariaDB 10.5.20 Release notes: https://mariadb.com/kb/en/mariadb-10-5-20-release-notes/ Tenable has extracted the preceding description block directly from t...

Fedora 37 : dbus (2023-51593ce398)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-51593ce398 advisory. Update to 1.14.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 37 : less (2023-71442d7613)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-71442d7613 advisory. Security fix for CVE-2022-46663 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Gatsby develop server has Local File Inclusion vulnerability

Impact The Gatsby framework prior to versions 4.25.7 and 5.9.1 contain a Local File Inclusion vulnerability in the file-code-frame and original-stack-frame paths, exposed when running the Gatsby develop server gatsby develop. The following steps can be used to reproduce the vulnerability: Create ...

VMware patches critical vulnerabilities in Aria Operations for Networks

VMware has released security updates to fix three vulnerabilities in Aria Operations for Networks which could result in information disclosure and remote code execution. The vulnerabilities were found in Aria Operations for Networks which was formerly known as vRealize Network Insight. Users of...

Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities

VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution. The most critical of the three vulnerabilities is a command injection vulnerability tracked as CVE-2023-20887 CVSS score: 9.8 that cou...