Adobe Premiere Rush <= 1.5.12 Arbitrary Code Execution (APSB20-39)

The version of Adobe Premiere Rush installed on the remote Windows host is version less than or equal to 1.5.12. It is, therefore, affected by out-of-bounds read and write vulnerabilities that could lead to arbitrary code execution. Note that Nessus has not attempted to exploit these issues but h...

Adobe Premiere Rush Installed

Adobe Premiere Rush, a video editing application, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid137652; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Adobe Premiere...

Adobe Premiere Pro < 14.3 Multiple Arbitrary Code Execution (APSB20-38)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-38 advisory. - Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitatio...

Dell SupportAssist Multiple Vulnerabilities (DSA-2019-051)

The Dell SupportAssist Client versions prior to 3.2.0.90, installed on the remote Windows host reportedly is affected by multiple vulnerabilities : - An improper origin validation vulnerability exist in Dell SupportAssist Client versions prior to 3.2.0.90. An unauthenticated remote attacker could...

VLC < 2.1.4 DoS

A denial of service DoS vulnerability exists in VLC media player. An unauthenticated, remote attacker can exploit this issue, by tricking a user into opening a specially crafted .png file, to cause the application to stop responding. C Tenable Network Security, Inc. include'compat.inc'; if...

Plex Media Server < 1.18.2 Privilege Escalation

According to its self-reported version number, the version of Plex Media Server installed on the remote Windows host is prior to 1.18.2. It is, therefore, affected by a local privilege escalation vulnerability. The vulnerability exists in the Plex Update Service due to exposed functionality over ...

CVE-2020-1259

A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka 'Windows Host Guardian Service Security Feature Bypass Vulnerability'...

Adobe Flash Player <= 32.0.0.371 (APSB20-30)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 32.0.0.371. It is, therefore, affected by an use after free vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code within the...

Mozilla Thunderbird < 68.9.0

The version of Thunderbird installed on the remote Windows host is prior to 68.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-22 advisory. - Mozilla developers Tom Tung and Karl Tomlinson reported memory safety bugs present in Firefox 68.8. Some of these...

Mozilla Firefox ESR < 68.9

The version of Firefox ESR installed on the remote Windows host is prior to 68.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-21 advisory. - Mozilla developers Tom Tung and Karl Tomlinson reported memory safety bugs present in Firefox 76 and Firefox ESR...

Adobe Premiere Pro < 14.2 Information Disclosure (APSB20-27)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 14.2. It is, therefore, affected by a vulnerability as referenced in the APSB20-27 advisory. - Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could le...

VLC < 3.0.5 Denial of Service and/or Infoleak Vulnerability

The version of VLC media player installed on the remote host with version 3.0.4. It is, therefore, affected by a denial of service and/or a potential infoleak vulnerability. CVE-2018-19857. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid136895; scriptversion"1.5";...

Wireshark 2.6.x < 2.6.17 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 2.6.17. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.6.17 advisory. - The NFS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire...

Google Chrome < 83.0.4103.61 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 83.0.4103.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 202005stable-channel-update-for-desktop19 advisory. - Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a...

Security Update for .NET Core SDK (May 2020)

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x 2.1.514 or 2.1.611 or 2.1.806, or 3.1.x 3.1.104 or 3.1.202. It is, therefore, affected by a denial of service vulnerability due to an unspecified flaw related to handling web requests. An unauthenticated, remote attacker...

Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30523, 2017.011.30171, or 2020.009.20063. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier,...

VLC < 3.0.9 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 3.0.9. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing...

Mozilla Thunderbird < 68.8.0

The version of Thunderbird installed on the remote Windows host is prior to 68.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-18 advisory. - Mozilla developers and community members Alexandru Michis, Jason Kratzer, philipp, Ted Campbell, Bas Schouten, An...

Adobe Illustrator < 24.1.2 Multiple Arbitrary Code Execution (APSB20-20)

The version of Adobe Illustrator installed on the remote Windows host is prior to 24.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-20 advisory. - Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:1139-1)

This update for xen to version 4.12.2 fixes the following issues : Security issues fixed : CVE-2020-11742: Bad continuation handling in GNTTABOPcopy bsc1169392. CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues bsc1168140. CVE-2020-11739: Missing memory barriers in read-write...