CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

CVE-2024-0157

Dell Storage Resource Manager (SRM) for Windows includes a Session Fixation vulnerability in the SRM Windows Host Agent affecting version 4.9.0.0 and earlier. An unauthenticated attacker on an adjacent network could potentially hijack a targeted user’s application session. Public details in conne...

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

PT-2024-5633 · Dell · Dell Storage Resource Manager

Name of the Vulnerable Software and Affected Versions: Dell Storage Resource Manager version 4.9.0.0 and below Description: The issue is related to a session fixation problem in the SRM Windows Host Agent. An unauthenticated attacker on an adjacent network could exploit this, potentially leading ...

SAP BusinessObjects Business Intelligence Platform Information Disclosure (3421384)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by an information disclosure vulnerability. Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating syste...

Google Chrome < 123.0.6312.122 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 123.0.6312.122. It is, therefore, affected by multiple vulnerabilities as referenced in the 202404stable-channel-update-for-desktop10 advisory. - Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a...

Adobe Illustrator < 27.9.3 / 28.0 < 28.4 Multiple Vulnerabilities (APSB24-25)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.3, 28.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-25 advisory. - Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that...

KB5036892: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (April 2024)

The remote Windows host is missing security update 5036892. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2024.1.3, 2023.1.5, 2022.1.4 or 2021.1.4. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted STP, CATPART or MODEL file in ASMKERN228A.dll when parsed through Autodesk AutoCAD c...

Trend Micro Apex One Command Execution (000294994)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12380 and Agent Build 12380. It is, therefore, affected by a vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One,...

Google Chrome < 123.0.6312.86 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 123.0.6312.86. It is, therefore, affected by multiple vulnerabilities as referenced in the 202403stable-channel-update-for-desktop26 advisory. - Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowe...

Mozilla Firefox < 124.0.1

The version of Firefox installed on the remote Windows host is prior to 124.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-15 advisory. - An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript...

Apple iTunes < 12.13.1 A Vulnerability (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.13.1. It is, therefore, affected by a vulnerability as referenced in the HT214091 advisory. - A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker may b...

National Instruments LabVIEW < 2024 Q1 Patch 1 Multiple Vulnerabilities

The version of National Instruments NI LabVIEW installed on the remote Windows host is version 2015 prior to 2024 Q1 Patch 1. It is therefore affected by multiple vulnerabilities: - An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful...

Adobe Animate 23.x < 23.0.4 / 24.x < 24.0.1 Multiple Vulnerabilities (APSB24-19)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.4 or 24.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-19 advisory. - Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerability that cou...

Adobe Premiere Pro < 23.6.4 / 24.0.0 < 24.2.1 Multiple Arbitrary code execution (APSB24-12)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.4, 24.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-12 advisory. - Premiere Pro versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds write vulnerability...

Adobe Bridge 13.x < 13.0.6 / 14.x < 14.0.2 Multiple Vulnerabilities (APSB24-15)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.6 or 14.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-15 advisory. - Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that cou...

BIT-GITLAB-2020-13347

A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKERAUTHCONFIG build variable...

Google Chrome < 122.0.6261.111 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 122.0.6261.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 202403stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a...