Adobe Photoshop 21.x < 21.2.5 / 22.x < 22.2 Multiple Vulnerabilities (APSB21-10)

The version of Adobe Photoshop installed on the remote Windows host is prior to 21.2.5/22.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-10 advisory. - Adobe Photoshop versions 21.2.4 and earlier and 22.1.1 and earlier are affected by a Buffer Overflow...

SAP BusinessObjects Business Intelligence Platform Clickjacking (2935791)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a vulnerability. SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably...

Mozilla Firefox < 85.0.1

The version of Firefox installed on the remote Windows host is prior to 85.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2021-06 advisory. - In the Angle graphics library, depth pitch computations did not take into account the block size and simply multiplied the row...

NVIDIA GeForce Experience < 3.21.0 DoS

The version of NVIDIA GeForce Experience installed on the remote Windows host is prior to 3.21.0. It is, therefore, affected by a denial of service vulnerability in GameStream rxdiag.dll due to improper handling of log files. An unauthenticated, local attacker can exploit this issue, where an...

Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30190, 2020.001.30020, or 2021.001.20135. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and...

Google Chrome < 88.0.4324.146 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 88.0.4324.146. It is, therefore, affected by multiple vulnerabilities as referenced in the 202102stable-channel-update-for-desktop advisory. - Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed...

Mozilla Thunderbird < 78.7

The version of Thunderbird installed on the remote Windows host is prior to 78.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-05 advisory. - Mozilla developers Alexis Beingessner, Christian Holler, Andrew McCreight, Tyson Smith, Jon Coppeard, Andr Bargull,...

Adobe Photoshop 22.x < 22.1.1 Vulnerability (APSB21-01)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.1.1. It is, therefore, affected by a vulnerability as referenced in the apsb21-01 advisory. - Adobe Photoshop version 22.1 and earlier is affected by a heap buffer overflow vulnerability when handling a specially...

Adobe Animate 21.x < 21.0.2 A Vulnerability (APSB21-03)

The version of Adobe Animate installed on the remote Windows host is prior to 21.0.2. It is, therefore, affected by a vulnerability as referenced in the apsb21-03 advisory. - Adobe Animate version 21.0 and earlier is affected by an uncontrolled search path element that could result in arbitrary...

Microsoft Edge (Chromium) < 87.0.664.75 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 87.0.664.75. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-1-7-2021 advisory. - Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to...

Dell Wyse Management Suite < 3.1 Multiple Vulnerabilities (DSA-2020-282)

The version of Dell Wyse Management Suite installed on the remote Windows host is prior to 3.1. It is, therefore, affected by the following vulnerabilities: - Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious use...

Mozilla Firefox ESR < 78.6.1

The version of Firefox ESR installed on the remote Windows host is prior to 78.6.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2021-01 advisory. - A malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet in a way that potentially resulted in a...

Wireshark 3.4.x < 3.4.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.4.1 advisory. - Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows...

Wireshark 3.2.x < 3.2.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.2.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.9 advisory. - Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows...

Wireshark 3.4.x < 3.4.2 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.4.2. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.2 advisory. - Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted...

Foxit PhantomPDF < 9.7.5 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.7.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

JFrog Artifactory < 7.10.2 Authentication Bypass

An authentication bypass vulnerability exists in JFrog Artifactory prior to 7.10.2 due to a vulnerability in google-oauth-client library. An unauthenticated, remote attacker can exploit this, by a using malicious app on the client-side to obtain the authorization code and use it to gain...

Mozilla Firefox ESR < 78.6

The version of Firefox ESR installed on the remote Windows host is prior to 78.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-55 advisory. - Mozilla developer Christian Holler reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...