Mozilla Thunderbird < 102.13.1

The version of Thunderbird installed on the remote Windows host is prior to 102.13.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-28 advisory. - Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly...

Adobe ColdFusion < 2018.x < 2018u18 / 2021.x < 2021u8 / 2023.x < 2023u2 Code Execution (APSB23-41)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 18, 2021.x update 8, or 2023.x update 2. It is, therefore, affected by a code execution vulnerability as referenced in the APSB23-41 advisory. Due to deserialization of untrusted data, a remote,...

Microsoft Edge (Chromium) < 114.0.1823.82 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.82. It is, therefore, affected by multiple vulnerabilities as referenced in the July 13, 2023 advisory. - Microsoft Edge for Android Chromium-based Tampering Vulnerability CVE-2023-36888 - Microsoft Edge for...

Adobe ColdFusion < 2018.x < 2018u17 / 2021.x < 2021u7 / 2023.x < 2023u1 Multiple Vulnerabilities (APSB23-40)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 17, 2021.x update 7, or 2023.x update 1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-40 advisory. - Improper Access Control CWE-284 potentially leading to Security...

Adobe InDesign < 17.4.2 / 18.0 < 18.4.0 Multiple Vulnerabilities (APSB23-38)

The version of Adobe InDesign installed on the remote Windows host is prior to 17.4.2, 18.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-38 advisory. - Adobe InDesign versions ID18.3 and earlier and ID17.4.1 and earlier are affected by an out-of-bounds wri...

Microsoft Windows Admin Center Spoofing (July 2023)

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by a security spoofing vulnerability. An authenticated, remote attacker can exploit this to bypass security features. Note that Nessus has not tested for th...

Mozilla Firefox ESR < 102.13

The version of Firefox ESR installed on the remote Windows host is prior to 102.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-23 advisory. - Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed...

Dell NetWorker Virtual Edition Command Injection (DSA-2023-060)

The version of Dell NetWorker Virtual Edition installed on the remote Linux host is prior to 19.6.1.2, 19.7.0.3, and 19.7.1. It is, therefore, affected by command injection vulnerability in the NetWorker client. An unauthenticated, remote attacker could potentially exploit this vulnerability,...

VulnCheck KEV: CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

Microsoft Edge (Chromium) < 114.0.1823.51 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.51. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2023 advisory. - Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacke...

Foxit PhantomPDF < 10.1.12 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.12. It is, therefore affected by multiple vulnerabilities: - Addressed a potential issue where the application could be exposed to Remote Code Execution...

Security Update for Microsoft Visual Studio Code (June 2023)

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.79.1. It is, therefore, affected by a session spoofing vulnerability. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 80900 Tenable, Inc. The descripti...

Artifex Ghostscript < 10.01.1 Buffer Overflow

The version of Artifex Ghostscript installed on the remote Windows host is prior to 10.01.1. It is, therefore, affected by a buffer overflow that can lead to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and...

Microsoft Windows PowerShell Remote Command Execution Exploit

This python script mints a .ps1 file with an exploitable semicolon condition that allows for command execution from Microsoft Windows PowerShell. This is an updated exploit to work with Python3. from base64 import b64encode import argparse,sys,os PSTrojanFile.py By hyp3rlinx c 2023 ApparitionSec...

Path Traversal

pimcore/pimcore is vulnerable to Path Traversal. The vulnerability exists because it does not properly validate the pimcorelog parameter in Pimcore.php which allows an attacker to overwrite or modify sensitive files in the system. This vulnerability is only applicable if pimcore is running on a...

Mozilla Firefox ESR < 102.12

The version of Firefox ESR installed on the remote Windows host is prior to 102.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-19 advisory. - Mozilla developers and community members Gabriele Svelto, Andrew McCreight, the Mozilla Fuzzing Team, Sean Feng,...

Mozilla Firefox < 114.0

The version of Firefox installed on the remote Windows host is prior to 114.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-20 advisory. - Mozilla developers and community members Andrew McCreight, Randell Jesup, and the Mozilla Fuzzing Team reported memory...

Autodesk PSKernel Out-of-bounds Read/Write (InfraWorks) (adsk-sa-2023-0009)

The version of Autodesk InfraWorks installed on the remote Windows host is version 2021.x prior to 2021.2, 2022.x prior to 2022.1 or 2023.x prior to 2023.0. It is, therefore, affected by multiple vulnerabilities. - A maliciously crafted pskernel.dll file in Autodesk products is used to trigger...

Google Chrome < 114.0.5735.90 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 114.0.5735.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop30 advisory. - Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a...

Wireshark 1.10.x < 1.10.14 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.10.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.14 advisory. - epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12....