VLC < 1.1.10 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 1.1.10. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in VideoLAN VLC media player before 1.1.10. An unauthenticated remote attacker can exploit this issue, vi...

Tom Sawyer Software GET Extension Factory COM Object Instantiation Memory Corruption

Tom Sawyer Software's GET Extension Factory, a component used for graph visualization applications, is installed on the remote Windows host. It may have been bundled with a third-party application, such as the VMware Infrastructure Client or Embarcadero ER / Studio XE2. The installed version of...

HP Intelligent Management Center Application Detection

HP Intelligent Management Center IMC, a network management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid54627; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Vanilla Forum p Parameter Local File Inclusion

The remote web server hosts Vanilla Forums, an open source forum software written in PHP. The installed version of Vanilla Forums uses a '/' character in the 'AnalyzeRequest' method in 'library/core/class.dispatcher.php' to separate input passed via the 'p' parameter of the 'index.php' script int...

Adobe Audition Installed

Adobe Audition, an audio and video production application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid54605; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Opera < 11.11 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.11. Such versions are potentially affected by: - A memory corruption vulnerability exists. The application does not properly handle specific framesets when unloading a page. An attacker could craft a web page that will...

PsExec Service Installed

The PsExec service, a tool that allows remote control of the system, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid53916; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01";...

MS11-036: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2545814)

The remote Windows host has a version of Microsoft PowerPoint that is affected by multiple vulnerabilities that could lead to arbitrary code execution : - A memory corruption vulnerability exists due to the application's failure to properly handle memory during function calls while parsing a...

HP Virtual Server Environment Detection

The remote Windows host contains HP Virtual Server Environment, an application for managing virtual server infrastructures. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid53623; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

Novell File Reporter Agent XML Tag Handling Buffer Overflow

The version of Novell File Reporter NFR Agent installed on the remote Windows host is earlier than 1.0.4.2. Such versions reportedly have a buffer overflow vulnerability because the service, which listens by default on TCP port 3037, blindly copies user-supplied data into a fixed-length buffer on...

TeamViewer Version Detection

TeamViewer, a remote control service, is installed on the remote Windows host. C Tenable, Inc. include'compat.inc'; if description scriptid52715; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/07/14"; scriptnameenglish:"TeamViewer Version Detection";...

Flash Player < 10.2.153.1 Unspecified Memory Corruption (APSB11-05)

The remote Windows host contains a version of Adobe Flash Player earlier than 10.2.153.1. Such versions are affected by an unspecified memory corruption vulnerability. A remote attacker could exploit this by tricking a user into viewing maliciously crafted SWF content, resulting in arbitrary code...

Citrix Secure Gateway Installed

Citrix Secure Gateway is installed on the remote host. This application provides a secure gateway between Citrix XenApp and client devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52545; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

Symantec IM Manager IMAdminSchedTask.asp Eval Code Injection Remote Code Execution (SYM11-004)

The version of Symantec IM Manager installed on the remote Windows host is earlier than 8.4.17. The 'ScheduleTask' method exposed by the 'IMAdminSchedTask.asp' page fails to properly sanitize user input to a POST variable before using it in an 'eval' call. If a logged in console user can be trick...

Moxa Device Manager Tool MDM2_Gateway Response Remote Overflow

Binary data moxamdmtool23.nbin...

SigPlus Pro ActiveX Control < 4.29 Multiple Vulnerabilities

The SigPlus Pro ActiveX control, used for electronic signature integration with Topaz signature pads and installed on the remote Windows host, is earlier than 4.29. Such versions reportedly are affected by the following vulnerabilities : - The 'SetLogFilePath' method allows creation of a log file...

Kerio Control Detection

Kerio Control formerly known as Kerio WinRoute is installed on the remote Windows host. It acts as a software-based firewall. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51388; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...

SmartFTP Detection

SmartFTP, an FTP client for Windows, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid50574; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"SmartFTP Detection";...

HP Systems Insight Control Detection

HP Systems Insight Control implements infrastructure management and has the ability to deploy, migrate, monitor, control, and optimize IT infrastructure through a management console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50539; scriptversion"1.7";...

Symantec IM Manager < 8.4.16 Multiple SQL Injections (SYM10-010)

The version of Symantec IM Manager installed on the remote Windows host is earlier than 8.4.16. Such versions are reportedly affected by multiple SQL injection vulnerabilities in its administration console. An unauthenticated, remote attacker may be able to exploit these issues to compromise the...