Rockwell FactoryTalk Batch View < 3.00 Authentication Bypass

The version of Rockwell FactoryTalk Batch View installed on the remote Windows host is prior to 3.00. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could...

Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)

The version of Microsoft Power Automate for desktop installed on the remote Windows host is 2.41.x 2.41.178.24249, 2.42.x 2.42.331.24249, 2.43.x 2.43.249.24249, 2.44.x 2.44.55.24249, 2.45.x 2.45.404.24249, 2.46.x 2.46.181.24249, or 2.47.x 2.47.119.24249. It is, therefore, affected by a remote cod...

Google Chrome < 128.0.6613.138 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.138. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop10 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137...

Adobe Illustrator < 27.9.6 / 28.0.0 < 28.7.1 Multiple Vulnerabilities (APSB24-66)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.6, 28.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-66 advisory. - Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe After Effects < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-55)

The version of Adobe After Effects installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-55 advisory. - After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability...

Mozilla Thunderbird < 128.2

The version of Thunderbird installed on the remote Windows host is prior to 128.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-43 advisory. - Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed...

Kingsoft WPS Office 12.2.0.13110 < 12.2.0.17119 Arbitrary Code Execution (CVE-2024-7263)

The version of Kingsoft WPS Office installed on the remote Windows host is at least 12.2.0.13110 and prior to 12.2.0.17119. It is, therefore, affected by an arbitrary code execution vulnerability: - Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from...

Foxit PDF Editor < 2024.2.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2024.2.3. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Editor Doc Object Use-After-Free Information Disclosure Vulnerability. This...

Vim < 9.1.0689 Heap Buffer Overflow

The version of Vim installed on the remote host is after 9.1.0425 and prior to 9.1.0689. It is, therefore, affected by a heap buffer overflow vulnerability. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of t...

Vim < 9.1.0697 Heap Buffer Overflow

The version of Vim installed on the remote host is prior to 9.1.0697. It is, therefore, affected by a heap buffer overflow vulnerability. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer ...

VMware Workstation 17.0.x < 17.5.1 Multiple Vulnerabilities (VMSA-2024-0011)

The version of VMware Workstation installed on the remote host is 17.0.x prior to 17.5.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Google Chrome < 128.0.6613.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a...

Microsoft Edge (Chromium) < 127.0.2651.105 (CVE-2024-43472)

The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.105. It is, therefore, affected by a vulnerability as referenced in the August 15, 2024 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability CVE-2024-43472 Note that Nessus has not...

Security Update for Microsoft .NET Core (August 2024)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - .NET and Visual Studio Information Disclosure Vulnerability CVE-2024-38167 - .NET and Visual Studio Denial of Servi...

Dell iDRAC Service Module < 5.3.1.0 Multiple Vulnerabilities

Dell iDRAC Service Module version 5.3.0.0 and prior, contains multiple Out-of-bound Write Vulnerabilities. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event. Note that Nessus has not tested for this issue but has instead relied only on the...

Vim < 9.1.0647 Use-After-Free

According to its version, the version of Vim installed on the remote host is prior to 9.1.0647. It is, therefore affected by a use-after-free vulnerability. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that...

WinSCP < 6.3.3 Key Recovery Attack Vulnerability

The version of WinSCP installed on the remote Windows host is prior to 6.3.3. It is, therefore, affected by a key recovery attack vulnerability. In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in...

Google Chrome < 127.0.6533.99 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 127.0.6533.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop advisory. - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a...

Mozilla Thunderbird < 115.14

The version of Thunderbird installed on the remote Windows host is prior to 115.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-38 advisory. - Unexpected marking work at the start of sweeping could have led to a use-after-free. CVE-2024-7527 - Insufficient...

Google Chrome < 127.0.6533.88 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 127.0.6533.88. It is, therefore, affected by multiple vulnerabilities as referenced in the 202407stable-channel-update-for-desktop30 advisory. - Insufficient data validation in Dawn in Google Chrome on Android prior to...