Citrix Licensing Service Detection (credentialed check)

Citrix Licensing Server, a licensing service, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid58562; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31"; scriptnameenglish:"Citrix...

Citrix Licensing Server Administration Components Multiple Vulnerabilities

The version of Citrix License Server installed on the remote Windows host is potentially affected by multiple vulnerabilities in the administration component : - An unspecified cross-site scripting vulnerability exists. - An unspecified cross-site request forgery vulnerability exists. - A denial ...

Adobe AIR 3.x <= 3.1.0.4880 Multiple Memory Corruption Vulnerabilities (APSB12-07)

According to its version, the instance of Adobe AIR 3.x on the remote Windows host is 3.1.0.4880 or earlier and is reportedly affected by several critical memory corruption vulnerabilities : - Memory corruption vulnerabilities related to URL security domain checking. CVE-2012-0772 - A flaw in the...

7-Technologies TERMIS Unspecified Path Subversion Arbitrary DLL Injection Code Execution

Binary data scadatermis210.nbin...

Novell GroupWise Client Installed

Novell GroupWise, an email client, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58401; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Novell GroupWise Client...

HP Data Protector Express Installed

HP Data Protector Express, a backup application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58398; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"HP Data...

Adobe ColdFusion Hash Collision DoS (APSB12-06) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by a hash collision denial of service. A flaw exists in the way ColdFusion generates hash tables for user-supplied values. By sending a small number of specially crafted requests to a web server that uses ColdFusion, an...

2X Client TuxClientSystem ActiveX InstallClient() Method Arbitrary MSI Package Installation

The version of the TuxClientSystem ActiveX control, part of the 2X Client, installed on the remote Windows host is earlier than 10.1 Build 1239. As such, its 'InstallClient' method reportedly accepts a URL to an MSI package and allows installation of an application without explicit user approval...

LuraWave JP2 Browser Plug-In < 2.1.1.11 npjp2.dll Remote Buffer Overflow

The version of the LuraWave JP2 Browser Plug-In installed on the remote Windows host is earlier than 2.1.1.11 and thus reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can...

LuraWave JP2 ActiveX Control < 2.1.5.11 jp2_x.dll Remote Buffer Overflow

The version of the LuraWave JP2 ActiveX control installed on the remote Windows host reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to execute arbitrar...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...

Symantec pcAnywhere Installed

Symantec pcAnywhere, a remote access application, is installed on the remote Windows host. C Tenable Network Security. Inc. include'compat.inc'; if description scriptid57795; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Symantec...

IrfanView < 4.32 Buffer Overflow

The remote Windows host contains a version of IrfanView earlier than 4.32. As such, it is reportedly affected by a buffer overflow vulnerability due to the way the application handles TIFF files with SGILog compressed images fixed. A remote, unauthenticated attacker could exploit this flaw to...

NTR ActiveX Control < 2.0.4.8 Multiple Vulnerabilities

At least one version of the NTR ActiveX control installed on the remote Windows host is earlier than 2.0.4.8. As such, it reportedly is affected by the following vulnerabilities : - Four stack-based buffer overflows exist involving the 'bstrUrl' parameter of the 'StartModule' method, the...

HP PKI ActiveX Control KillProcess Denial of Service

The version of the HP PKI ActiveX control installed on the remote Windows host is earlier than 1.2.0.1. As such, it reportedly contains an insecure method named 'KillProcess' that could be used to terminate arbitrary user processes. C Tenable Network Security, Inc. include"compat.inc"; if...

RSA SecurID Software Token Installed

RSA SecurID Software Token, a two-factor authentication application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid57348; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

MS11-093: Vulnerability in OLE Could Allow Remote Code Execution (2624667)

The remote Windows host contains a flaw in the way OLE objects are handled in memory. An attacker can exploit this issue by tricking a user into opening a specially crafted OLE object file that could execute arbitrary code in the context of the user. C Tenable Network Security, Inc...

Adobe Acrobat < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)

The remote Windows host contains a version of Adobe Acrobat earlier than 9.4.7. Such versions are affected by multiple memory corruption vulnerabilities related to the 'Universal 3D' U3D file format and the 'Product Representation Compact' PRC component. A remote attacker could exploit this by...

Advantech / BroadWin WebAccess webvrpcs.exe Service Remote Code Execution (credentialed check)

Binary data scadaadvantechwebaccessrcelocal.nbin...

Advantech / BroadWin WebAccess webvrpcs.exe Service Remote Code Execution (uncredentialed check) (deprecated)

The Advantech / BroadWin WebAccess software installed on the remote Windows host includes an RPC service webvrpcs.exe that listens remotely on TCP port 4592. It is affected by two vulnerabilities : - An overflow condition exists due to improper validation of user-supplied input. An unauthenticate...