Citrix Virtual Apps and Desktops Licensing Issues Vulnerability

Citrix Systems Citrix Virtual Apps and Desktops is a virtualization software from Citrix Systems that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Virtual Apps and Desktops that originates from an authenticated user executi...

Adobe Reader < 2017.011.30188 / 2020.001.30018 / 2020.013.20074 Vulnerability (APSB20-75)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2017.011.30188, 2020.001.30018, or 2020.013.20074. It is, therefore, affected by a vulnerability. - Acrobat Reader DC versions 2020.013.20066 and earlier, 2020.001.30010 and earlier and 2017.011.30180 and earli...

Adobe Prelude < 9.0.2 Arbitrary code execution (APSB20-70)

The version of Adobe Prelude installed on the remote Windows host is prior to 9.0.2. It is, therefore, affected by a vulnerability as referenced in the APSB20-70 advisory. - Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary...

Mozilla Thunderbird < 78.5.1

The version of Thunderbird installed on the remote Windows host is prior to 78.5.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-53 advisory. - When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to...

CVE-2020-27131 Cisco Security Manager Java Deserialization Vulnerabilities

Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied content by the...

CVE-2020-27131 Cisco Security Manager Java Deserialization Vulnerabilities

Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied content by the...

Google Chrome < 87.0.4280.66 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 87.0.4280.66. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop17 advisory. - Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.6...

Mozilla Firefox ESR < 78.5

The version of Firefox ESR installed on the remote Windows host is prior to 78.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-51 advisory. - Mozilla developers Steve Fink, Jason Kratzer, Randell Jesup, Christian Holler, and Byron Campen reported memory...

Mozilla Firefox < 83.0

The version of Firefox installed on the remote Windows host is prior to 83.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-50 advisory. - Mozilla developers Tyson Smith, Aaron Klotz, David Major and Jason Kratzer reported memory safety bugs present in Firef...

Google Chrome < 86.0.4240.193 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.193. It is, therefore, affected by a vulnerability as referenced in the 202011stable-channel-update-for-desktop9 advisory. - Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed...

Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30180, 2020.001.30010, or 2020.013.20064. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175...

Adobe Creative Cloud < 2.2 / 5.0 < 5.3 Arbitrary Code Execution (APSB20-68)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 2.2, 5.3. It is, therefore, affected by a vulnerability as referenced in the APSB20-68 advisory. - Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by a...

Adobe Illustrator < 25.0 Multiple Vulnerabilities (APSB20-53)

The version of Adobe Illustrator installed on the remote Windows host is prior to 25.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-53 advisory. - Adobe Illustrator version 24.1.2 and earlier is affected by a memory corruption vulnerability that occurs when...

Foxit PhantomPDF < 9.7.4 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.7.4. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

Guild Wars 2 Insecure Folder Permissions

Exploit Title: Guild Wars 2 - Insecure Folder Permissions Date: 2020-10-09 Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild War...

Battle.Net 1.27.1.12428 - Insecure File Permissions Vulnerability

Exploit Title: Battle.Net 1.27.1.12428 - Insecure File Permissions Exploit Author: George Tsimpidas Software Link : https://www.blizzard.com/en-gb/download/ Battle Net Desktop Version Patch: 1.27.1.12428 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability...

HP Device Manager 4.x < 4.7 SP 13 / 5.x < 5.0.4 Multiple Vulnerabilities

According to its self-reported version number, the version of HP Device Manager installed on the remote Windows host is 4.x prior to 4.7 SP 13 or 5.x prior to 5.0.4. It is, therefore, affected by multiple vulnerabilities: - A weak cipher implementation that is susceptible to dictionary attacks...

Google Chrome < 86.0.4240.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in networking in Google Chrome prior to...

Google Chrome < 85.0.4183.121 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 85.0.4183.121. It is, therefore, affected by multiple vulnerabilities as referenced in the 202009stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a...

Google Chrome < 85.0.4183.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 85.0.4183.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 202009stable-channel-update-for-desktop advisory. - Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102...