Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...

MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

The version of the Local Security Authority Subsystem Service LSASS installed on the remote Windows host does not properly handle malformed packets in LDAP messages when used in conjunction with Microsoft Active Directory / Active Directory Application Mode / Active Directory Lightweight Director...

TeamViewer Connection Handling Remote Overflow Denial of Service

The version of TeamViewer installed on the remote Windows host is earlier than 5.0.8421. Such versions are affected by a remote denial of service vulnerability when receiving data from clients. By sending malformed packets to the server, a remote attacker can cause CPU usage to stay at 100% for t...

Adobe Reader < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)

The version of Adobe Reader installed on the remote host is earlier than 9.4 / 8.2.5. Such versions are affected by multiple code execution vulnerabilities. Note that there have been reports that one or more of these issues are being actively exploited in the wild. C Tenable Network Security, Inc...

Apple iTunes < 10.0 Multiple (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.0. Such versions are affected by numerous issues in the WebKit component. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49086; scriptversion"1.13"; scriptcvsdate"Date: 2018/11/15...

Shockwave Player < 11.5.8.612

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.8.612. Such versions are potentially affected by the following issues : - Multiple memory corruption issues exist that could lead to arbitrary code execution. CVE-2010-2863, CVE-2010-2864,...

MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214) (remote check)

The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...

Yahoo Toolbar Internet Explorer 6 Policy Bypass

Yahoo! Toolbar is a toolbar for web browsers and can be installed on the Internet Explorer and Firefox browsers. It allows access to several functions, including Yahoo! Search and Yahoo! Mail. It also contains built-in algorithms to prevent pop-ups and spyware. A policy bypass situation occurs wh...

MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

The TCP/IP stack installed on the remote Windows host is affected by one or more of the following vulnerabilities : - An error exists in the Windows TCP/IP stack when processing specially crafted IPv6 packets with a malformed extension header that could cause the affected system to stop respondin...

Safari < 5.0.1 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 5.0.1. Such versions are potentially affected by numerous issues in the following components : - Safari - WebKit C Tenable Network Security, Inc. if NASLLEVEL 3000 exit1; include"compat.inc"; if description scriptid47888;...

CVE-2010-1969

Cross-site scripting XSS vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Apple iTunes < 9.2.1 'itpc:' Buffer Overflow (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2.1. Such versions may be affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs that could allow an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an...

Cerberus FTP Server MLSD and MLST Command Hidden Files Security Bypass

The version of Cerberus FTP server on the remote host is earlier than 4.0.3.0. Such versions are potentially affected by a security bypass vulnerability. The 'MLSD' and 'MLST' commands list hidden files despite the 'Display hidden files' option being disabled. A remote attacker, possibly...

Apple iTunes < 9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2. As such, it may be affected by multiple vulnerabilities : - A heap-based buffer overflow in the handling of images with an embedded ColorSync profile may lead to an application crash or arbitrary code execution...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

HP MFP Digital Sending Software Detection

The remote Windows host contains HP MFP Digital Sending Software, an application that enables an HP Multifunction Peripheral MFP to send scanned documents directly to several types of destinations. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46675;...

HP Virtual Machine Manager Detection

HP Virtual Machine Manager VMM is installed on the remote host. VMM provides centralized management for multiple virtualization platforms. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46238; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Alt-N MDaemon < 11.0.1 Multiple Remote DoS

The remote Windows host contains a version of Alt-N MDaemon that is earlier than 11.0.1. As such, it is prone to multiple remote denial of service attacks. An attacker may exploit these issues to deny the application's services to legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security,...

HP Operations Manager SourceView ActiveX LoadFile / SaveFile Stack Overflows

The SourceView ActiveX control, a component of HP Operations Manager, installed on the remote Windows host reportedly is affected by buffer overflows that can be triggered by passing specially crafted Unicode strings to the 'LoadFile' or 'SaveFile' methods. If an attacker can trick a user on the...

Computer Associates XOsoft Multiple Flaws (CA20100406) (credentialed check)

XOsoft, a product from Computer Associates for combined business continuity and disaster recovery, is installed on the remote Windows host. According to its version, it is affected by several vulnerabilities. - By sending a specially crafted SOAP request, it may be possible for an unauthenticated...