Wireshark 1.10.x < 1.10.12 / 1.12.x < 1.12.3 Multiple DoS Vulnerabilities

The remote Windows host has a version of Wireshark installed that is 1.10.x prior to 1.10.12 or 1.12.x prior to 1.12.3. It is, therefore, affected by multiple denial of service vulnerabilities in the following dissectors : - DEC DNA Routing CVE-2015-0562 - LPP CVE-2015-0561 - SMTP CVE-2015-0563 -...

VMware vCenter Update Manager Multiple Java Vulnerabilities (VMSA-2014-0012)

The version of VMware vCenter Update Manager installed on the remote Windows host is 5.1 prior to Update 3. It is, therefore, affected by multiple vulnerabilities related to the bundled version of Oracle JRE prior to 1.6.081. C Tenable Network Security, Inc. include"compat.inc"; if description...

Adobe ColdFusion Unspecified DoS (APSB14-29) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by an unspecified denial of service vulnerability due to a resource consumption issue. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79859; scriptversion"1.8"; scriptcvsdate"Date:...

Flash Player <= 15.0.0.239 Multiple Vulnerabilities (APSB14-27)

According to its version, the installation of Adobe Flash Player installed on the remote Windows host is equal or prior to 15.0.0.239. It is, therefore, affected by the following vulnerabilities : - A security bypass vulnerability that allows an attacker to bypass the same-origin policy...

Wireshark 1.12.x < 1.12.2 Multiple DoS Vulnerabilities

The remote Windows host has a version of Wireshark installed that is 1.12.x prior to 1.12.2. It is, therefore, affected by multiple denial of service vulnerabilities in following dissectors : - AMQP CVE-2014-8711 - NCP CVE-2014-8712, CVE-2014-8713 - SigComp CVE-2014-8710 - TN5250 CVE-2014-8714 A...

VMware vCenter Converter 5.1.x < 5.1.2 / 5.5.x < 5.5.3 Multiple Vulnerabilities (VMSA-2014-0010) (Shellshock)

The version of VMware vCenter Converter installed on the remote Windows host is 5.1.x prior to 5.1.2 or 5.5.x prior to 5.5.3. It is, therefore, affected by the following vulnerabilities : - A command injection vulnerability exists in GNU Bash known as Shellshock, which is due to the processing of...

ImageMagick < 6.8.9-9 Multiple Vulnerabilities

The remote Windows host is running a version of ImageMagick prior to version 6.8.9-9. It is, therefore, affected by the following vulnerabilities : - An out-of-bounds read error exist in the function 'CloneImage' within file 'image.c' that can allow application crashes or information disclosure...

WinZip Unsupported Version Detection

According to its self-reported version number, the installation of WinZip on the remote Windows host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenabl...

Flash Player <= 15.0.0.167 Multiple Vulnerabilities (APSB14-22)

According to its version, the installation of Adobe Flash Player installed on the remote Windows host is equal or prior to 15.0.0.167. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues due to improperly sanitized user-supplied input allow arbitrary...

Adobe Acrobat Help Page XSS

The version of Adobe Acrobat installed on the remote host is a version equal to or prior to 9.5.2. It is, therefore, affected by an input validation error related to the Help page that can allow cross-site scripting attacks. Note that Nessus has not tested for this issue but has instead relied on...

Juniper Junos Pulse Client Privilege Escalation (JSA10644)

According to its self-reported version, the installation of Junos Pulse Client on the remote Windows host is version 4.0 prior to 4.0r6 or a version prior to 3.1r8. It is, therefore, affected by a privilege escalation vulnerability that allows a local attacker to gain administrative privileges vi...

Adobe AIR <= AIR 14.0.0.110 Multiple Vulnerabilities (APSB14-18)

According to its version, the instance of Adobe AIR on the remote Windows host is equal or prior to 14.0.0.110. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exits that allows code execution. CVE-2014-0538 - An unspecified security bypass error exists...

HP Version Control Agent (VCA) < 7.3.3 Multiple SSL Vulnerabilities

The installation of HP Version Control Agent VCA on the remote Windows host is a version prior to 7.3.3. It is, therefore, affected by multiple vulnerabilities in the bundled version of SSL : - An error exists in the 'ssl3readbytes' function that permits data to be injected into other sessions or...

Flash Player <= 14.0.0.145 Multiple Vulnerabilities (APSB14-18)

According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 14.0.0.145. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that allows code execution. CVE-2014-0538 - An unspecified security bypass err...

HP Systems Insight Manager 7.2.x < 7.2 Hotfix 37 / 7.3.x < 7.3 Hotfix 34 OpenSSL Multiple Vulnerabilities

The version of HP Systems Insight Manager installed on the remote Windows host is affected by the following vulnerabilities in the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service...

VMware vCenter Converter Multiple Vulnerabilities (VMSA-2014-0006)

The version of VMware vCenter Converter installed on the remote Windows host is version 5.1.x prior to 5.1.1 or 5.5.x prior to 5.5.2. It is, therefore, affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to ...

VMware Horizon View Multiple Vulnerabilities (VMSA-2014-0006)

The version of VMware Horizon View installed on the remote Windows host is version 5.3.x prior to 5.3.2 or 5.3.x prior to 5.3 Feature Pack 3. It is, therefore, affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow...

AVG 'ScriptHelperApi' ActiveX Remote Code Execution

The remote host is running a version of AVG Secure Search toolbar / AVG Safeguard, prior to version 18.1.7. The AVG ScriptHelperApi ActiveX control distributed with the software is affected by a remote code execution vulnerability. The installed ActiveX control fails to properly enforce...

LibreOffice 4.2.x < 4.2.3 OpenSSL Multiple Vulnerabilities (Heartbleed)

A version of LibreOffice 4.2.x prior to 4.2.3 is installed on the remote Windows host. This version of LibreOffice is bundled with a version of OpenSSL affected by multiple vulnerabilities : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions...

MS14-039: Vulnerability in On-Screen Keyboard Could Allow Elevation of Privilege (2975685)

A privilege escalation vulnerability exists on the remote Windows host due to improper handling of low integrity processes with the On- Screen Keyboard OSK. A local attacker could exploit this vulnerability to execute arbitrary code on the remote host under the privileges of the current user. C...